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ITS I C D 


Date of transcription 09/21/2015 


fUZ /FOLIO l On September 14, 2015, 


_social security number 

Investigation (FBI) Special Agent (SA)j_ 


Platte River Networks, date of birth 


was intervi ewed by Federal Bureau of 


and SA : 


for the intervi ew was Department of Justice (DOJ) Attorney 
attorney at the 


and 


Also present 


nature of the interview] 


Afte r being advised of the identity of the interviewing agents and the 
provided the following: 


(U/ /F00 6) As 


general role with the client and not involved with technical details, 
general direction of the business. 


described his role at PRN as a 


main concern is the 


(U//FOUO) Platte River Networks (P RN) work ed with an individual named 


identify business opportunities. In early 2013 


to 


brought them a client opportunity who she claimed 
once worked as a public official. After submitting a bid to do the work, PRN became aware the contract 
they were bidding on was for the management of an email server hosting domains associated with BILL 
CLINTON, HILLARY CLINTON and their aides. PRN won the bid for the contract and the account was 
under the name CESC. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U/ /FOfjQ') PRN wanted to limit the employees working on the C ESC server, so it was 


determined [ who worked remotely on the server, andj 


who 


was aware 


handled the server on-site, would be the technical team doing most of the work, 
that PRN picked up an old server from the CLINTON residence and delivered it to Equinix, a datacenter 
in Secaucus, New Jersey. PRN ordered and installed new server ha rdware at Equin ix and migrated all 
CESC email from their old server to the new PRN provided server. ! I was aware that PRN 

maintained a back-up of the server known as a DATTO. The DATTO was located at Equinix and worked 
by taking snapsh ots of the server and mai ntaining tha t data for un to 6 0 days before it was deleted. 


leferred to for specifics 

Enterprise Server managed by PRN, but deferred to 


|was also aware of a BlackBerry 


on the specifics. 


(U/ /FOUO ) In or around March 2015 


was involved in conversations with CESC 


where they req ue sted to know wh at email they had, where it was, and how it was backed up. 

and_handled this request and would know more details. CESC never asked 
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Continuation of FD-302 of 


Interview o 


£ 


On 07/23/2015 . Page 


for administrator rights to the PRN server or for physical access to the server at Equinix, 
believed CESC was still a PRN client and were operating under the same contract they originally signed. 


(U/ /FOUB ) 


CESC email server run by PRN. 


didn’t believe there was a successful intrusion attempt against the 
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( U//FQ GQ1 On May 23 , 2016 


secu rity numberl 

(SAll 


date of birthl 


social 


was interviewed b y Federal Bureau of Investigation (FBI) Special Agent 
and SA_at the offices of Platte River Networ ks (PRN) located a t 


b6 

b7C 


5700 Washington Stre et. Denver. Colorad o 80216. Also prese nt for the interview was 


i i - 1 i- 

and via speaker phone_| both attorneys at the 


the identity of the interviewing agents and the nature of the interview, 
following information: 


1 Afte r being advised of 


Jprovided the 


(U/ /TOU O) 


Jwas not aware of a laptop containin g an archive of e mail belonging to 

was not aware 


HILLARY CLINTON that was shipped to PRN around February 2014. 
what became of the foregoing laptop. 


(U/ /FOUO X 


lonly recently was made aware of a CLINTON email archive file being 


tra nsmitted to the ClintO ] 
hy_ 


t 


Executive Ser vices Corporation (CESC) around July 2014 and September 2014 
_ was not aw are of the request by CESC, or transmittal by 


b 6 
b7C 


hS 

hlC 


as it w as occurring. 


CESC or exactly howl 


Iwas not aware of what specifically was requested by 


fulfilled the request. 


fU//FQU01 Ivas not aware of anv sunnort PRN nrovided the CESC client from 

October 2014 to January 2015. 
shred their email records. As a 
technical details of any PRN c' 

was not aware of anv CESC reauest to delete, wipe or 

would not pay attention to 

ient. 
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(U/ /TQUQ) At this 
the March 2015 timeframe 


f 


pint in the inte rview. Agents displayed PRN provided records and email from 
provided the following information: 


(U/ /FOUO) In March 2015, when various media outlets reported a private email domain and 
server was used by HILLARY CLINTON, PRN decided to cre ate an internal “ share drive” and control 


access to only the PRN employees working the CESC account. 


stated PRN did have back¬ 


ups of their own servers. PRN never deleted information pertaining to the CESC client and provided the 
FBI all records they maintained pertaining to CESC. 
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Continuation of FD-302 of,_ Interview on _ I _ 

(U/ /FOU O) In March 201 5 \ ^stated CESC rea 

content, to include where it existed. PRN employee_ 

data center in Secuacus, New Jersey where the CESC server equips 
not a party to the discussion involving CESC 3 s request for inv entnl 
instructions]_did not recall what_spec:" 

(U/ /FOUO) After Agents di splayed an email dated March 
discussed preservation of materials, could not recal 

preserve CESC related data. 


On 07/23/2015 . Page 


1 their email 


I specific 
■r equipment. 

MILLS 
entity to 


(U/ /FOUO) l _lh as no recollection of a conference call on March 25, 2015 or March 

31,2015 with CESCL_Istated CESC never re quested their em ail content by deleted, wiped 

or shredded. Recently,_[vas made aware that|_used Bleach bit software to 

shred .pst em ail files contain ing CESC email content that was transferred to CESC. As | 

understood it j Icre ated a “vehicle” to transfer email files from the live mailboxes of CESC 

email accounts. t hen later used Bleachbit software to shred the “vehicle” but the email 

content still existed in the live email accounts. 

(U//TOUO)_was unaware of any PRN employee conducting manual deletions of 

the DATTO device used to back-up the CESC email server. 


(U/ / F OUO) 


was unaware of any successful computer intrusion of the CESC server. 


(U// FOUO) Notes of the interview and documents displayed tc 
in a FD340 envelope and filed with the captioned investigation. 


will be maintained 
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(U//F6W©) On April 19, 2016 
social security account nu mber fSSANl 
tFBP Special Agents fSA)[ 
llocated atf 


Jattorneysf 


and 


date of birth (DOB)|_| and 

was interviewed bv Federal Bureau of I nvestigat ion 
at the law offices ofj_ 


interviewing Agents, and the nature of the interview. 


W ashington DC 20005. Also present for the interview were 
|and| I. After being advised of the identity of the 

provided the following information: 


oj /mm) 


is currently the£ 


_|met President WILLIAM CLINTON 

Jat the White House in the fall oi l I After hisj^ 


and HILLARY-C LINTON when he became an 
served in various positions in 


the CLINTON White House and continued to work for President CLINTON after his presidency. 

(U// FOUO) In the years after President CLINTON left the White House, CLINTON’S staff 
managed certain details related to the information* technology needs of CLINTON’S office. One of those 
needs required negotiating with an individual who owned several .com domains related to CLINTON’S 
name. | I recalled these domains to be presidentclinton.com, clintonfoundation.com, and owjc.com. 

Ultimately, negotiations were successful and the domains were purchased from the individual. 

(U/ /FOUO) In 2006 or 2007, JUSTIN COO PER obta ined a private email server (Apple Server) 
for the office of President CLINTON. COOPER ant j ~| had several conversations about reliability 
issues related to the previous outsourced server and decided it would be best to have a server under their 
physical control at the CLINTON’S residence in New York. COOPER handled the procurement and all 
aspects o f serve r management, to include the creation of new accounts or any requests to move email. 


Lot server 
believed 


with H UM A A H TTP) 

Server. 


|initiallyhademaU^^ R ecalledaconversation 

BLuTN and COOPER regarding the addition of HILLARY CLINTON to the A pple 
] thought it was a bad idea, but the issue had been decided by that point in time, 
dition of HILLARY CLINTON to the Apple Server occurred while she was in the S 


believed the addition of HILLARY CLINTON to the Apple 
CLINTON used BlackBerry devices obtained by COOPER to access her email. 


Senate, 
was not involved 


in the decision to move to a new server (Exchange Server), but recalled it was located, as was the Apple' 
Server, in the basement of the CLINTON’S New York residence. 
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Interview of Justin Gregory Coop er 


On 03/02/2016 , Page 


(U/ /FOUO^ COOPER notifieq__ 

system, bui_could not recall any specific details. They shared a mutual concem[ 


few times each year about attempted i ntrusions of the 


had too much private information about the CLINTONS and may have had access to some of their 
communications. 


(U// FQUO ) | had no knowledge regarding the following topics: 


discussio ‘oi^iovet 







ge Server 

to move to the Exchange Server 
Exchange Server 


personnel involved ir 
domains on 
users on - Excha 

dispositft ifme Exchange Server after decommissioning 

classified information on Apptaflfrver or Exchange Server 

conversations concerning fed^^Be cords as it related to the Apple Server or Exchange Server 
backups of the Apple Server or Exchange Server . 

. Sensitive Compartmented Information Facilities at the CLINTON’S New York or Washington, 
DC residences_did recall Secure Telephone Units in New York and Washington, DC) 


Secure fax machines or secure computers at the New York or Washington. DC residences 
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(U//F OUO) O n June 6. 2016. 


social secu rity number 
Ajgent (SA)[ 


date of birth 


w as interviewed by Feder al Bureau of Investigation (FBI) Special 
land SA_at the FBI Washington Field Office, 601 


Street NW. Washington, DC 20535. Also present for the interview was FBI Intelligence Analyst 

_ [ After being advised of the identities of the interviewing agents and the purpose of the 

interview, "[provided the following information: 


(U/ /FOU 6) 


works for[ 


specializing in the areas of missile, space, and intelligence. In addition, 


a company focus ed on domestic data acquisitio n which] 


Jias several products to include 


from the over 60 billion records in 


possession. 


a def ense contracto r 


owns 


(established in 


as well as other p roducts drawn 

Dark Horse Data, 


Inc. (DHD), a company owned by former Deputy Under Secretary of Defense for Intelligence 
REGINALD HYDE. DHD works with foreign data, can contract directly with the government, and 
frequently embeds its personnel with clients. 


(U/ /FOUO) In June or July 2015 J 


States Senate Committee on the Judiciary, contacted 


a senior staff member of the United 
[out of conce rns data from HILLARY 


[wanted to determine if there 


CLINTON’S email server might end up overseas. Specifically 

was an intrusio n into CLIN TON’S server and, if so, whether exfiltrated data fell into the hands of a 

Jwas concerned any exfiltrated data could endanger her three sons, who are 


foreign power. 
Marines. Addi 
Therefore] 


ional 


comprom ised. 


y, sh e was unset as a citizen and Senate Staff Member that this situation could occur. 


asked 


if it was possible to determine if CLINTON’S server had been 


jstated he would have to look for data that was genuine, authentic, and relevant. 


defined those three terms as follows: 


Genuine - data originating from CLINTON’S server 
Authentic - data that had not been altered 

Relevant - data from CLINTON’S server that was moved outside of the United States to a place 
where a foreign actor could access it 


(U/ /FOUO) Sincel 


September 2015 she met with NEW' 


did not have funding fo r the projec t described above, in August or 


GINGRICH and asked 


no brief GINGRICH on the project. 
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Interview of I 


. On 06/06/2016. Page 


GINGRICH, and 


were all bothered by the potential that data from CLINTON’S 
server had been compromised GINGRICH wanted t o sneak with oth ers about the proje ct and in 


December 2015, recommended 
the project as four phases to 


speak with 


% 


Judicial Watch. 


The phases were to determine if: 


briefed 
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Phase 1 -CLINTON’S server was directly or indirectly attacked 

Phase 2 -SIDNEY BLUMENTHAL’s server was directly or indirectly attacked 

Phase 3 — data was exfiltrated outside the United States 

Phase 4 - data was exposed to a foreign actor 


Ad 


briefed the project, he raised the question of what the course of action would be if classified 
informatio n was unco vered. The three discussed it and decided Judicial Watch’s legal counsel should be 
consulted. 


never received an answer, but was of the opinion that if he uncovered data he 


thought might be classified, he would be obligated to report it to the appropriate authorities. 

(U//FOUO) In January or February 2016, Judicial Watch’s legal counsel advised the project was 
feasible, but could not involve accessing any systems without authorization. The project could review 
open s ource data following the four phases described above. After these initial discussions with Judicial 
Watchl Iconcluded the motivation of Judicial Watch’s actions was not centered on the elections. 


(U/ /FOUO) 


advised there are three potential funding streams for the types of projects 


his company undertakes. They can be funded by his company, a government contract, or a data 
arbitrageur. In this situation, the arbitrageur would invest in litigation on the prospect of a judge awarding 
the arbitrageur attorney’s fees. 


(U//FOUO) In February or March 2016, 


company, 


Watch to proceed with Phase 1. Judicial Watch awarded the contract tel 


was gi ven $32,000 by Judicial 
becaus e they were 

trad to 


confident he understood both the Deep Web and Dark Web. After receiving the contract, 
determine the best place to obtain the necessary data for the project. Based on the terms outlined by 
Judicial Watch’s counsel. C LINTO N and BLUME NTHAL’s respectiv e servers were offlimits, as were 


offshore servers. 


turned 


t 


a former executive at 


a cyber intelligence 


company which inges ts d ata from th e Deep Web and Dark Web and, then, indexes the data. By 


leveraging_d ata. I c ould searc h the Deep W eb and D ark Web without exposing his 


searches to the Internet 


paid 


$2,500 to have 


conduct searches based on search 


terms provided by_| These search terms included, but were not limited to, HILLARY 

CLINTON , SIDNEY BLUMENTAL- and an Inte rnet Proto col (IP) address range obtained from an email 
provided t d 


|by Judicial Watch. In return,) r 
which was the exclusive data source used bM 


provide d the results of those searches to 


Jor this project. 


(U/ /TOUO 


eviewed the data pr ovided by 


BLUMENTHAL’s server on a server in Romania. 


md found files from 

believed BLUMENTHAL had a personal 
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On 06/06/2016. Page _3 


server because he found some of BLUMENTHAL’s files on the server in Romania, but not any of 
BLUMENTHAL’s emails. The Romanian server contained approximately 200 Microsoft Word, Excel, 
and other file types belonging to BLUMENTHAL. 


(U//FOUO) In ref erence to a M ay 22, 2009 alleg ed intrusion of CLINTON’S server appearing in a 


draft version of a report on[ 
hack or the specific date. 


project 


stated he could not recall where he learned of the 


pecula ted it was p ossibly from a public report, but he had looked for 


the source and could not find it. Therefore, 
iterations of the report. 


planned to remove the reference from future 


(U//FOUO) Duringl 


p review of the data obtained by 


1 j ie found one sensitive 

Excel file listing the names of known or suspected jihadists in Libya. |_[added that a portion of the 

file was in Russian. The file did not come from BLUMENTHAL’s server, but contained a r eference to an 
IP address range that included the IP address of CLINTON’S server. Upon viewing this file,_ 


became concerned he had found a classified document and stopped the project. This work completed 
Phase 1 and_planned to deliver the final report to Judicial Watch soon. 


(U//F OUO ) 


stated some o f the BLUMENTHAL files were dat ed on or ab out January 


2012, which was the same timeframe when | "^c ontacted! 

Libyan Rogue Nation Judgment Recovery Program (LRNJRP)._ 

bv the I.ih yan opposition government to recover the assets of the MUAMM AR GADDA FI government. 


_ | regarding the 

[claimed he was hired 


Jalso met with TYLER DRUMHELLER regarding the same matter. 


speculated 


BLUMENTHAL, if involved in the LRNJRP, could have written the memos as a “shake and bake” tactic. 


(U//FOUO) A copy of the original interview notes and documents provided to the FBI by 
during the interview are enclosed in a 1A envelope. 
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On September 14, 2015J_ _ 

Networks (PRN), date of birth_social securft 

Federal Bur eau of Investigation (FBI) Special Agent IS All 
| Also present for the inter view waj 

Department of Justice (DOJ) Attorney_ I Afh 

interviewing agents and the nature of the interview,_ 


| Platte River 
viewe d by 


_|ffom|_|and 

isiadvised of the identity of the 


Provided the following: 


On or about January 2013j _| ol|__ I contacted I _[egarding 

potential busines s with a h igh profile former government client._had an existing 

relationship with [ because she previously referred other clients from a family wealth asset 

management firm. The potential client’s current email server architecture lost connecti vity during pypn 
such as Hurricane Sandy, so they wanted better support than their existing arrangeme nt I 
with the assistance of other PRN personnel, put together a proposal and submitted it te l Once 

PRN was chosen as one of the three finalists for the contract, PRN was notified the potential client was 


WILLIAM CLINTON and! 
After PRN won the c on tracl 
and | 

working on the project smal 
directly on the CESC pr oiec 
signed in Au gust 2013 asl 
ma nager!, and 
and handl ed an 

work at Equinix, while 
work on the project. 


1LLAKY CLINTON, doing busin ess through a com pany named CESC. 

-ItQOk on a smaller role anc j worked primarily with 

^ _J CESC wanted to keep the number of individuals 

so PRN identified three people as the only personnel allowed to work - 


Those individuals were identified i 

- __ n solution de sign). [ 

](help desk). |_ did am 

ximate lv 10% of the work. I 

handled everything else" | 


trvice Level Agreement (SLA) 

_(project 

nately 90% of the work for CESC 
Irole was to help with on-site 
was ultimately not needed to 


Whe n l |-IwaS asked to review an ema il he sent discussing a new email address for 

HILLARY CLINTON’_stateq could not answer the question for attorney-client 

privilege reasons. A copy of the email is attached to this communication in an FD-340. 

PRN chose Equinix as the datacenter for CESC’s new email server (hereafter, PRN server) 
specifically because it did not go down during Hurricane Sandy. This project was PRN’s first time using 
Equinix. transported CESC’s existing equipment (hereafter, predecessor server) and 

transported it to Lqumix, so the content of the predecessor server could be migrated to the new PRN 
server. 
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—interview ol . On 09/14/50(5 Paor 1 

technical aues 

tions res 

stated PRN 
arding' snarri 

used an outside firm, MX Logic, for spam filtering, but referred other 
filtering, data migration, archives/backups, and Microsoft Exchange to 


and/or 



had no knowledge of: 


be 

blC 


b 6 
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• Email servers used by CESC prior to the one transported by PRN to Equinix. 

• The existence of classified information on either server. 

• Discussions regarding federal records retention. 

• Intrusions to the PRN server. 
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TJ//FOUO) On May 23, 2016]_date of birth_social security 

numben I was interviewed bv F ederal Bureau of Investigation (FBI) Special Agent (SA) 

_and _at the offices of Platte River Netwo rks fPRNi located a t 5700 

Washington St reet. Denver. Colo rado 80216. Also pr esent for the intervie w wa d l and via 

speaker phone,_both attorneys at the__ After bei ng advised of the 

identity of the interviewing agents and the nature of the interview, provided the following 

information: 



(U/ /FQUQ J 

had contact with PRN client CLINTON EX1 
of contact at CESC were CHERYL MILLS, 


(U//FOUO) | was not aware of a laptop containin 

HILLARY CLINTON that was shipped to PRN around February 2014. 
what became of the foregoing laptop. 


Jfor PRN, and in that role, 
ATION rCESC i- His points 


mail belonging to 
was not aware 



(U//FOUO vas not aware of a CLINTON email archive being tra nsmitted to the 

Clinton Execut ive services Corporation (CESC) around July 2014 and September 2014 by | ~| 


(U//F OUO) |_ 

October 2014 to January 2015.[ 
shred their email records. 


are of any support PRN provided the CESC client from 
was not aware of any CESC request to delete, wipe or 


(U/ /FOUO) At this 
the March 2015 timeframe 



view, Agents displayed PRN provided records and email from 
provided the following information: 


(U//FOUO) In March 2015, w hen various medi a outlets reported a private email domain and 
server used by HILLARY CLINTON. e ntertained the ide a of hiring a t hird nartv com 

to conduct penetration t esting of the CESC emaj l seivei]_| recommended] 

from a company named!_but the testing ultimately did not occur. 
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Interview ol 


. On Q7/23/2Q15 . Page 


(U/ /FOUO ) In March 2015, 


recalled PRN employed 


kravelled 


to the Equinix data center, but did not know the purpose of the trip. 

(U/ /FOUO) After Agents d isplayed an email dated March 09, 2015 where CHERYL MILLS 

discussed preservation of material si __| could not recall any other request by any entity to 

preserve CESC related data_recalled receiving some guidance by PRN attorneys to 

preserve data, but could not recall specifically. 


(U/ /rOU O)| 


March 31. 2015 with CESC 
PRN’s attomey.[ 
shredded. 


lad 


no rec ollection of a specific conference call on March 25, 2015 or 


Idid recall conference calls with CESC that were run by 


(U//F QUOM 


stated CESC never requested their email content by deleted, wiped or 
was unaware of any successful computer intrusion of the CESC 


server. 


(U//FOUO} Notes of the interview and documents displayed to^ 
in a FD340 envelope and filed with the captioned investigation. 


will be maintained 
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(U/ /TOUO ) On F ebruary 4. 2016 
]nY, mobile phone 


home address 


was interviewed at the law offices of Bryan Cave LLP. 1155 F 
Street NW Washi ngton. DC 20004 bv Fed eral Bureau of Investigation (F BI) Special Agen t (SM 


counsel. 


and SA[ 


Department of Justice attorney^ 






the interviewing agents and the nature of the interview. 


]were also present for th e interview . After being advised of the identity of 

provided the following: 


(U// TOUO) 


(CLINTO N) in 1997 when he was assignedl 


first met Pre sident WILLIA M CLINTON and HI LLARY CLINTON 

o The White House asl 


At that time, 

received a securi ty cleara nce after a single scope background investigation was conducted. He 


served in The White Housel 
CLINTON left office. On I 


told 


accepted the offer and on 


their New York family. 

NY residence. For the first six months^_ 

nrnvided tn every president who leaves office f 


Ito include traveling with the President , until 2001 when Presi dent 

President CLINTON’sf 


Ithe C LINTONs had been kee ping an eve on him and would like him to join 

drove to their Chappaqua, 


I 


1 I_I * * 1 ' 

I position was covered as part of the military assistance 


he primarily focused on 


He then returned to Chappaqua where 


but ended up with many more responsibilities. 


recalled an Apple server in the basement of the CLINTON’S Chappaqua 


(U// rOUO) 

residence, hut do es not remember when it was installed or by whom. It was a big box to the right of 


does 

_with no exte rnal devices attached, ho wever, it had an internal capability to backup data. 

HUM A ABEDIN,| | HILLARY CLINTON, III STTN COO PF.R AND 


server as a workstation. 


pad email accounts under the owjc domain housed on the server 


also used the 


(U//FOWO) 


did not know of plans to install the server constructed by BRYAN 
PACtT TANO at the time it occurred. The server consisted of three thin black boxes mounted in a rack, 
described himself as not technical and, therefore, could not speak to any details regarding this 


server. 
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Investigation on 02/04/2016 at, 

[302 ~ w > 


Washington, DC 


File# 
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(U//FOUO)_did not recall escorting anyone from Platte River Networks in June 2013 

into the Chappaqua residence to remove the server described above. 

(U//FOUO) HILLARY CLINTON’S office was on the third floor of the Chappaqua residence. 
After she became the Secretary of State, the State Department.(State) converted it into a sensitive 
enmnartme nted information facility (SCIF). During the installation of the secure lines for the SCIF, 
stood at the door as an escort for the technicians. After that conversion, CLINTON was the 
only one who had the combination to access the office until it was decommissioned one to two weeks 
after her departure from State. It contained approximately three phones installed by State.) 
believed all three to he s ecure phones and described them as a black STU phone, a yellow phone, and a 
white phone.) did not know the differences in the phones. The office al ^o containe d 

CLINTON’S non-secure desktop computer, a shredder, and a secure fax machine._initially 

stated he only entered the SCIF once or twice, when CLINTON was present, to remove trash. 

(U/ /TOUO) _later recalled a procedure established by ABEDIN with_at the 

beginning of CLINTO N’S tenure &t State far situations when CLINTON needed assistance with the secure 
fax. When was notified by Sffte personnel of an incoming secure fax, he would locate 

CLINTON, follow her to the SCIF, and assist as needed with the incoming fax. He was never in the SCIF 
to receive a fax without CLINTON presentand never physically picked up any of the documents 
received. If the fax was not working, State would sometimes send a courier wi th documents or a 

diplomatic pouch to the Chappaqua residence. On those occasions_would escort the courier 

from the y ate to the door and the courier would hand the documents or pouch directly to CLINTON. 
_would also coordinate the repair of the fax when broken. 

(U// FOUO) ABEDIN or CHERYL MILLS would sometimes notif}_the Presidential 

Daily Brief (PDB) woul d be coming via secure fax to the residence. As described above with other 
secure faxes | would locate CLINTON a nd assist w ith the incoming secure fax. The PDB was 

also hand cairied to the residence on occasion and would escort the courier to CLINTON. 

ni/Y TOnfF i Ineriq dicallv received emails from ABEDIN with attached documents 

intended for CLINTON._[would print the documents and give them to CLINTON, but does not 

know what happened to the documents after CLINTON was finished with them. Last Name 

Unknown handled similar duties at CLINTON’S residence in Washington, DC. 

(U/ /FOUO) CLINTON had sev eral BlackB errv devices over the course of time. When 
CLINTON had issues with one of them, | would ask COOPER for advice on how to fix it. 

believed CLINTON had a State BlackBerry, but did not recall a secure mobile phone. 


(U//F©W©)[ 

(U/ /FOUO) [ 



did not recall setting up an Apple ID or iPad for CLINTON. 


id not recall a secure phone in CLINTON’S bedroom. 
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Date of transcription 03/23/2016 


Chief Executive Officer (CEO) 


interviewed at his place of employme nt. 


and his email address is 


was 


telephone number is 


was advised that 


the FBI had identified 37 login attempts to the A PPLE ICLO UD account 
of hdr22@clintonemail.com, originating from three 




was provided with the IP addresses that 


addresses 

login attempts. After being advised of the identitie s of the 


owned IP 
made the 


interviewing Agents and the nature of the interview, 
the following information: 


provided 


headquarte] ^s inf 
locations. 


La s approxima tely | [ employees at their main 


provide[ 


"l and an additional 


employees in other 
They 


including m ^nv DS 
components. 


has a large customer base 


f 


overnment agencies and Department of Defense 


1 


rovided the Agents with a demonstration of th^J 

| on a laptop in his office. 


b 6 
b7C 


b4 

b6 

b7C 


b3 


others. That data is then 


and 


b4 

b6 

b7C 


_provides their clients with two basic services: 1) their 

security platform can be used to link and search f or current social 


b6 


media information on the Internet; and 2) 
social media monitoring for their c lients 


can provide on-going 
explained that the 


b7E 


utilizes their continuous 


b6 

b7C 

b3 

b7E 


b6 

b7C 


Investigation on 03/23/2016 
File n 


at 


By SM 


CYBER 


Date dictated 


N/A 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned; to your agency- it 
and its contents are not to be distributed outside your agency. 
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monitoring service to generate ale rts for new so cial medi a posts 


relating to current 


Additionally, 


b6 

provides that b7c 

same service for all United States Department of Commerce employees, b7E 
whether they are aware of it or not. 

_ Along with searching for 


b4 

b6 

b7C 


1 confirmed that two of the three IP addresses shown to him 

belong to |_ _ stated that the third IP address may have 

bee n assigned to them in the past, but that it was no longer active. 
The I _ I is assigned to 


b4 

b6 

b7C 



field was displayed without a corresponding password field. 


b4 

b6 

b7C 


To the best of 


recollection. 


I 


was not hired by 


attributed the login 


HILLARY CLINTON or anyone on her behalf. 

attempt^ to being_ conducted by one of their -clients, utilizing, the 


platform. 


order to verify that 


then left the interview for a brief moment in 
J was not conducting any contin uous 

monitoring services for HILL ARY CLIK TomL Vh^n he returned, _ 

confirmed that they are not. |_[stated that he had a co-worker of 

his search for CLINTON'S nam e within their Pl atform. In order to 
protect the FBI's inquiry at Jhad the co-worker search 


for CLINTON'S name in the system, along with the names of two 
additional current Presidential candidates. The results were I negative 
on all three searches. 
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he 

hlC 


was then informed that the hdr22@clintonemail.com email 
account was published in a NEW YORK TIMES article on March 02, 2015, 


and that the 


login attempts occurred on the following day. 


stated that this made sense to him. Given that information, he 


theorized that the login attempts were likely made by one of their 
"good guy" clients, possibly to conduct a damage assessment on the 
social media footprint associated with that email add ress. How ever. 


stated that he could not verify his theory, as 


had no 


additional data to corroborate it. 


is amenable to future contact with the FBI. 


be 

b7C 


b6 

b7C 
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hS 

hlC 


| | recalled sharing se veral emails with PRN emp loyees regar ding 

clintonemail.com domain. _[primarily dealt with[_ but 


the ______._ _ 

remembered tha t the re were a couple of other PRN employees included on 
the exchanges. | "[ th en went to h is office and printed out several 
email between him and | Those printouts are enclosed for the 

file in a physical 1A envelope. 


never had access to the clintonemail.com domain 

nor do thev ho si 

: any of their company services on PRN networks. The 
interactions with PRN employees, related penetration 

extent of 

testing, and t 
exchanges that 

le clintonemail.com domain are documented in the email 

provided during this interview. 


(Identified 


.While reviewing the emails provided by | ^ SA 

nnp which references a public news article, where an individual named 

had utilized a scanning tool called FIERCE to 


identify the addre sses used for HILLARY CLINTO N'S (CLINTON'S) person al 
pmai1 server. I Iprovided that the referenced 


provided that 


formerly 


managed an Internet blog where he posted new h acks and. exploits on 
almost a daily basis. A few years ago, however. 


discontinued publishing his fin dings on the Int ernet 


that 


community. 


goes by the name of 


within the 


went dark and 
provided 
hacking 


has known 


c 


for several years. 


recalled that 


a passion for music, 
business that put on large- scale rock concerts, which would rival t hat 


The two of them share 

a 


of a Madonna-sized concert. 
two share music as a common bond. Additionally 


recalled that 
a blimp company that provided aerial 


the 


coverage over large public events. 
recalled meeting 


which 


at a Colorado technical event, 
referred to the event as a leads 


event, which was a technical expo in Colorado where information 
technology experts coul d exchange ideas and network with one another. 


During that event. 


spok e on a panel with 


SECRET SERVICE Agent, named 
another pr ior to the event, 


and a US 


Purina introdu ctions with one 


Recalled USSS SA | | stating to 


that he had recently served a warrant at PRN. □ surmised 


that statement to relate to the on-going investigatio n of C 
email server. Agent Note: A follow-up call to USSS SA 


rINTON' s 
identified 
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b6 

b7C 


warrant referenced in that conversation was served in support of 
different matter. 



| 

H ewa 



situ; 

it ion 


has 


as a "good guy", who is c aught in a bad 


has st ated his fru strations td 


regarding the 
stated that it has had a 


b6 

b7C 


CLINTON email investigation. < _ i 

direct impact on PRN's business, and that they have spent a large 
amount of ip onev in legal fees related to the matter. Primarily, 
is concerned over the negative publicity that PRN has 


received in the news media. Additionally, PRN has been asked to step 
out of certain requests for proposals (RFP's) as a result of the 
investigation. 


In ad dition to 
with PRN'_s 
However, 


1 


has been 


has al so had limited interactions 
Last Name Unknown (LNU). 


primary point of contact at PRN. 


When asked whether or not 


utilizes the 


social media cyber security product, 

| |j_s amenable to future contact with the FBI. 


stated that they do not 
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,_ r date of birth (DOB) | [ was 

int erviewed frv Federal Bureau of Invest 1 nat i nn (FBI) Special Agents 


(SA) 

DAY 


and 


_i i_l at the law offices o: 

Pitney located at One Canterbury Green, Stamfor d, ct DfiQm ai 


present for the interview were DAY PITNEY attorneys 

7 \ a - 1_r. . \ ^ . 


After being advised of the identit y of the 


and 


interviewing Agents, and the nature of the interview 
the following information: 


provided 



is currently employed as 


J located at 101 Merritt 7, Norwa] 

-k, CT 06851, and has h^ld rha 


position for 


LO DATTO. 


,rior to that, _ was 

and worked partly as the 


b6 

b7C 


b6 

b7C 


DATTO is a company that provides products and services to small 
businesses related to cloud storage and disaster recovery. DATTO had 
an established relationship with PLATTE RIVER NETWORKS (PRN) and 
provided them server back-up and recovery services for some time. 
DATTO's relationship with PRN was already established in 2013 when PRN 
acquired a new contract to manage an email server with a client known 
to DATTO as CESC. At the time, DATTO did not know who PRN's client 
CESC was. 


When PRN reached out to DATTO in.May 2013 to provide back-up 
services for the CESC client server, PRN requested a slightly ' 
different service from DATTO than they normally request. Typically, 

PRN would request that DATTO back-up remotely to DATTO's secure cloud. 
For the CESC client server, PRN requested that the server be backed-up 


Investigation on ii/i9/2015 at Stamford. CT 



- 

3Q2 ' * 1 pate dictated N/A 


SA 


1 4 < 

toft' 
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locally and privately. At the time of- this request, it was not only a 
new request for PRN, but a non-standard process for DATTO. In order to 
affect the private, local.storage needs for PRN's CESC client, PRN 
ordered a SIRIS 2000 device from DATTO, but forgot, or did not know, 
to also order the private node that the data would be routed to and" 
stored on. Because of this, the default -on the DATTO configured SIRIS 
2000 sent the CESC server back-up data remotely to DATTO's secure 
cloud and not to a local private node. This default configuration on 
the SIRIS 2000 has since been changed. 


_ 1 stated that PRN must have known data was being logged in 

DATTO - s secure cloud and not on a local private node. As evidence, 

] stated the partner portal, that PRN had log-in credentials to, 
eature displaying backed-up data and options to delete cloud or 
stated PRN would have seen their back-ups under 


Add a 
delete local 


- | | 

delete cloud. Additionally, f 

i—lTl mrriA _i 1 ► . ^ l 


,_, was shown a document provided by 

DATTO indicating email records were manually deleted from t hp hatth 
secure cloud back-ups of the 'PRN CESC server in March 2015. I 

n ^ ^ J_l_.lL. J h 1 i, # L L 


stated that it couldn't have been a DATTO employee that deleted those 
email records, because there would have been a work ticket indicating 
as much. Co ncernmg the IP addresses as sociated with the March 2C15 


deletions, 


thought 


handling the connection and 


WSfen't 


was the DATTO relay server 
was a local host connection. 


stated PRN had log-in credentials on the partner portal that 
tied to one employee, so he did not know who from PRN logged 
" ~iven time. 



sent to the DATTO cloud through Secure File Transfer 
jTP) from the local DATTO device purchased by the client. 

TO devices, for different., clients, are synced to one node 
data storage. Each DATTO device is segmented on‘that node 
tes to a directory paired'with the corresponding device, 
the servers is partially encrypted and a password would be 
cess remotely. 


The DATTO server farm is housed in Pennsylvania, multiple levels 
underground, in a secure facility. In order to access the facility, 
you must be a client there and process through security, which 

includes a biometrics scan. The cages that house the servers are also 
locked. 
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DATTO virtualizes systems locally on the DATTO appliance or 
remotely in the DATTO secure cloud. As part of this process,- an' 
automatic test is conducted to verify the virtualization where 
screenshots of the windows login screen are sent to DATTO clients 
Many of DATTO's clients, to include PRN, would occasionally get 

"backup ver ificatio n -failure" notices showing their DATTO device was 
unbootablej i ’ . 


,_, indicated this notice occurred very frequently and 

almost always was an issue involving the virtual environment and not 
DATTO actually failing to maintain back-ups of the associated servers. 
This issue was usually resolved with a handful of solutions to include 
changing drivers and controllers or lengthening windows for 
verification. 
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b6 
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■DATTO never altered or configured the retention settings 
regarding the period of time or frequency that the PRN server was 
backed up. The retention settings are set by the client. 

On 08/13/2015, after the CESC client was known to DATTO and 
lawyers became involved regarding the retention, preservation and 
production of records regarding the CESC client, DATTO shipped a new 
SIRIS 2000 device to PRN. The impetus.to the shipment was the 
realization that the SIRIS device originally purchased by PRN was not 
encrypted. The provision of the new SIRIS device wag initiated by,' 
DATTO and brokered by their attorney, | [ DATTO provided the 

device to have increased security while also ensuring continuity of 
operation on the server. 


_stated the DATTO secure cloud is frequently scanned and 

he has no■knowledge of any intrusion or deep penetration of their 

stated the best place to look for network intrusion 


systems. 
is the sy 


stem logs, 


■_ _, never discussed federal records retention or classified 

information with any representative of PRN or CESC * 
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Records Information end Dissemination Sect loo, Winch, ester, Virginia 
was interviewed at FBI Headquarters, Washington, D*C. After being 
advised of the ident ities of the interviewing Agents and the nature of 


the in terview, 


provided the following information.-. 


terepnona 


Management Division for the 


Approximately 6 weeks ago, 

of the Depardnanpt of State (STATS) Freedom of Information Act 


received an email from 


£ FOT A} sect 1 on. 


email enclosed copies of 5 emai 


c orftmun x ca t r one 


from former Secretary of State HILLARY CLIN TOR3 private email account 
which STATS believed may contain ■'■FBI equities. ” STATE requested the 
FBI conduct an appropriate classificatio n revi ew of the emails prior 


to their scheduled FOIA public release. 
were transmitted —z 


advised these 


unelassifiecl, 


him on a classified email system hut vere marked 
recognised that at least 1 of the emails appeared 


classified and forwardsd same to the Counterterrorism X>j 
for classification review. These emails were reviewed bv 1 

vision_(CTD) 

and 


of CTD. 

1 







relayed these findings to STATE as per protocol. 


b6 


Records Management Division, b?c 


y-i 



has been employed in the Records 


b6 
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ly 1 week later f STATE J s Office of Segal Counsel (OLC) 
and ones t ion e d t he FBI * h BECFBT/ / iJOPORK deter mi n ation. 



could not recall the name of the caller. According to OLC, 


does not have an official government and therefore it believed the FBI 
could not classify a document based on the FG1 caveat „ OLC also 
advised that theyy, not the FBI, are the judge of potential harm to 


classify' a document baaed on those conditions. 



as such remained clas?si f.led at the SECRET/ /h£OFORR Xeve 1, 


r irmiv 


hS 

blC 
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IrivCsitj^atlovi on {j7.B0.n0 a 3 .at. 

Y\\c4 


Bv SA 
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FD’30&s 


CoHtoRKtLtoi: wfi D'^02 uf_. kticr-v icw o 

believed,,. based on 
Authority (OCA), t 
aceuratelv. 


4&S_SSAIAASS_ 

it the email was 


„.. On fl?DO/T)15 . Rige _2__ 

an Or i gina1 Clanaif1cation 


clast! 


Led properly 


QhArr^ v 


thereafter 


~J received a 


rail 


ram 


of the Internationa 1 Operations ki.vxaion. 
(XOD) o f the FR X . - who vv nr o s aur e ci" h im t o cb angs the c 1 a a s i f .Led eniai 1 
to unclaesi f led. indicated be had been contacted by PATRICK 

KENNEDY, Unde r c ec re t a ry of State, who bad asked bis assistance in 
altering the email's class! float lot- in exchange for a 'braid pro quo." 

advised that, in exchange for marking the email unclassified. 


STATE would reciprocate by allowing the FBI to place more .Agents in 
countries where they axe presently forbidden. 


was summoned to an 
there pertai ning to 


" a. 1X 

IS 


_Lhi 


Following the above exchange, 
agency" meeting at STATE to discuss ra 
classJ.fi cat ion review of pending C LAN TON FOX A materials. 

official from STATE, along ’with representatives from CIA, DIA 
and other government agencies were present. PATRICK KENNEDY presided 
over the meeting'. During the conversation, a participant specifically 
asked whether any of th e emails in question were classified. MaHna 

eye contact with KENNEDY remarked, "Well, we■' .11 see," _ 

believed this ans ref eren.ee to the FBI'* s catsgorJ.zatior, of the 
SECRET/ / NO FORT etna i .1 wh ich KENNEDY was a t temp t ibg - to i n f lu er.es . In a 
priva te meet ing with KENNEDY following the all agency meeting, KENNEDY 


a sxen 


whether the FBI | could 
unclassified?" According to 


'see their way to marking the email 
KENNEDY spent the next 15 minutes 


debating the classification of the em ail and attempting to influence 


the FBI to ehanae 


tne email was 


markings. Since 


continued to assert that 


appropriately marked SECRET//NOFQEN, KE NNEDY a sked wh 


else in the FBI he could speak with on the matter. 
KENNEDY to MICHAEL STEINSACH, Assistant Director of CTB 


referred 


and 

the 


was then present during a conference call involving KENNEDY 
STEINBACK in which KENNEDY continued to pressure the FBI to change 

to unclassifled. STEINBACH 
conversation, KENNEDY asked 


'j .1 ass i tied ma rk i tigs 
Prior 


or; 

to 


the email 
ending the 


s t a. t emen t a on 


refused to do so. 

whether the FBI or STATE would conduct the publi 
matter. STE INBACH advised KENNEDY that the FBI would not comment 
public lv on the matter, The conference call ended and, according to 


the Associated Prs 


(AP} publ i she d t he s t c rv wi thin the hour. 


Former Secretary of State CLINTON appeared ir: front of the press 
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CotmiiEiatica tff fi,V302 of_ Imomcw at 

shortly thersaf rer to d^ny having sent: 
private email server. 


On a" >!■ :■;:! s . page.__ 

classified emails on 


ner 


believes STATS has an agenda which involves minimising 
lass if led ns fare of the CLINTON emails in order to pro tect STA TS 


in.tere s ts and t hose 


f 


CLINTON„ Since 


above incidents, 




received approximately 3 or 9 more emails from STATE involving FBI 
equities1 of which he believes may be classified SECRET/ /NOFQRLL 
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Date of irsmstTiatio!) 09/03/20] i 


retirement on 


i mrouo i _[Federal Bureau of Investigation (PBn 


Katema tirmal Operations Division (IO D). who h currently 
Wets in terviewed in per son bv FBI Snp eial Anegtsl 


Supervisory' Special Agent (SSA/J 



_M 

interview, 

_ _J 


at a 


located at 


land 


provided the following information; 


(U/ / F QUO) As 


interacted with PAT RICK F, KENN EDY. U.S. 


Department of State (DoS) Under Secretary' of State for Management; 


and KENNEDY’S 


relationship was professional. The two got along, but did not agree on many matters related to the FBI is 
role and authority overseas. 


(U/uFOU©) In late May or earlv June, 


KENNEDY contacted him. 

BOIFS and Executive Assistant Director (’ 
ICIFNKEE^V for months without response. 


found a note on his desk indicating 


Jwas surprised, as both his Assistant Director (/YD) JOHN 
I AD) ROBERT ANDERSON, had both been trying to contact 


(U/^eee) men 


returned KENNEDY’S call, KENNED Y' asked 


assiatfc iC-e h Changing a classificalion of FBI informatio n contained ma n e -mail. KENNEDY iild not 


dde[ 


V-fl- A J. h- 

Jwith 1 be e-mail howe ver, he told 


prov _ 

FBFs Records Management Division (RMD) 
document was classified* 


that 


ot 


was the one that told KENNEDY the 


(U/7 mm) KENNEDY tol 


Ithat the FBFs classification of the e-mail in question 


caused problems for KENNEDY and KENNEDY warned to classify the document as ^B9Y KENNEDY 
further stated that the classification wo uld allow him to archive the document in the basement of 
DoS never to he seen again. was not sure o.fwhat KENNEDY meant by a i4 B9'* 

ciassificaticm [Note: B9 may be a reference to a FOIA exemption]- 


(IJ/ /FOUQ) Not yet knowing the e-mail's content. 


told KENNEDY he would look 


into the e-mail matter If KENNEDY" would provide authority concerning the FBEs request to increase Its 
personnel in Iraq. 
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hi c 


he 

hlC 


he 

hlC 


he 

hlC 
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Washes42tttR., DC 



This fiotumeni contains neither recofnmcndftUons nor ccmeiuskins of ttie HH, ft is ihc puopmy of the FC1 tmd O teamed id ygur it 

nnd its cuntculs szs nni lo bo iJiatributt-d outside your agency. 
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(U// rOUO ) Foilowin g his conve r sion with KJiNN ED Y| 
discuss the e-mail of concern, tokl 


contacted 


to 


the e-mail, of KENNEDY'S concern was 


classified by the FBI Counieilerrorism Division (CTD) and was related to the attac ks on the U.S. 
Consulate in Benghazi, Following his conversation with. 


Jomacted KENNEDY 


and informed him that there was no way ire could assist KENNEDY with declassifying tire information 
contained in the e-mail. 


(LYrt 


tmd ANDERSON and BOLES about KENNEDY'S re quest to 


declassify the e-mai l and 
did not discuss the content of the e-mail with them. 


response denying ihe ability to do so, however] 
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£U//FOUO) On December 16, 2015 


Owner and Chief Technol ogy Officer 


was i nterviewed bv Federal Bu reau of Investigation (FBI) Speciaj 
and SA 


the interview, 




Agent (S A 


attorney^ 


Also present for the interview was 

After being advised of the identity of the interviewing agents and the nature of 
rovided the following: 


(U//POUOj | foundec_while living in Chicago and currently has a family 

of approximat ely! Employees com prised of full and pa rt-time em ployees, as well as subcontractors. 

a business associate o i l contacted her about a client who 


In early 2013, . _ 

needed a new email server Afte j exp ressed an intere st in the project and understood the clients • 


were HIL LARY AN D WILLIAM CLINTON 
few other 


:s 

n 


- „ _ r ut her in contact with CHERYL MILLS, 

perso nnel assist ed with invoicing and technical aspects of the contract, bu;_ 


most of the work herself._| primary contacts were MILLS and BRYAN PAGLIANO; MILLS 

helped produce the proposal and PAGLIANO assisted in developing the requirements for the server 
architecture.! _started the discussion by providing a range of options from low-cost Gmail to a 


A 

did 


more sophisticated private server. She understood the client’s impetus for the project to be 
reliability/uptime and security in the wake of a situation where the client’s private server housed in their 
residence experienced one w ^ek of dow ntime because of a storm. The client selected the private server 


from the options provided by 


was not involved in those decisions 


Backup systems were planned for Phase 2 of the project, but 


(U//FOUO) As part of the initial conversations with PAGLIANO and MILLS 
one point th e domains and number of email accounts on the server, but could not recai 




new at 


1 those details. 


Additionally 

equipment maintained by PAGLIANO. 


Ihad no knowledge of email servers owned or operated by the client prior to the 


(U/ /FOUO) After the client selected a private server! 


contacted two firms she had prior 
experience with: GRAVITAS, a large Information Techno lo p firm a nd PLATTE RIVER NETWORKS 


(PRNj 

and 


a small boutique firm . After the client selected PRN 


or two meetings; 


mm. 

Sib 


develop the details of the projeHl 


worked w ith MILLS, PAGLIANO, 
was only involved in one 


elieved he was curious about the process. PAGLIANO handled the technical 


aspects of the project and MILLS handled strategic concerns. As PRN took over day-to-day man agement. 
nvolvement gradually faded out. The client occasionally reached out for assistance anq 


would help where she could. Payment for her services was billed for the entire task, not hourly, so she 
did not charge any fee for this assistance. 
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(U/ /TQUO) 


Ibelieved a Cloud Jacket-type security device was part of the project design, so 


when it wasn’t part of the initial install, she pushed for the implementation of it after the migration from 
the PAGJLIANO server to the PRN server. During the migration she was not in the weeds, but knew 
enough to know it was done correctly from a security standpoint. | ] was not aware of any security 

intrusions or compromises while she was involved in the day-to-day operations of the transition, nor was 
she brought back in aft er the fac t on any security issues. In addition to the CloudJacket. as part of the 
security considerations, ! | discussed transitioning from BlackBerries to the iPhone with the client, as 

well as blocking international access to the server: Ultimately, the client chose to stay with BlackBerries 
and international blocking was declined because the client frequently traveled internationally. 


tU/ ZTOUQ ) Since press reports ofl 


public 

Assessments for some of their shared clients, 
on the CLINTON’S server. 


association with PRN and the CLINTON’S went 
Jand some partners contract ed Denth S ecurity to conduct Vulnerability Threat 

was not aware of any such assessment conducted 


(U/ /FOUO )| 
PRN servers: 


had no knowledge of the following topics as they relate to the PAGLIANO or 


• moving emails to a new domain 

• laptop backups 

• temporary backups 

• classified information 

• federal records 
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(U/ /TOUO) On May 23,2016,[ 


date of birthl 


by Federal Bureau of Investigation (FBI) Special Agents (SA)| 


the nature of the interview 


After being advised 


was interviewed 


|and S^| 

at the offices of Platte River Networks (PI frNI located at 570 0 Washington Street, Denver' Colorado 
80216. Also presen t for the interview w as 
both attorneys at the) " 


and via speaker phone, 


of the identity of the interviewing agents and 


provided the following information: 


(u/ /fouo£ 


was given PRN administrator credent! 
Cnmnratinn (CEStTi email server, but c ould not recall logging in ti 

Jwere in charge of handling 


assisted with the CESC client le ss than fi ve times. He recal 
updating their operating system.) [talked to 

times. 


led he 
Last Ni 



e Service 
stood 


ecalled he 
CESC in 
CESC most 


rvi££_ 

4 I 


(U//F0tf©)| 


was not aware of a laptop containing 
HILLARY CLINTON that was shipped to PRN around February 
became of the foregoing laptop. 



(U/ /FOUO ][^ 
2014 to January 2015 


records. 


Iwa s not aware of any support PRN provided the CESC client from October 
was not aware of any CESC request to delete, wipe or shred their email 


was not aware of any email content being transmitted to CESC. 


(U/ /FOUO) At this point in th e interview, Agents displayed PRN provided records and email from 


point in th e 

the March 2015 timeframe.!_provided the following information: 


(U/ /FOUO X 


Iwas not aware of a trip made by PRN employee 


Ito the 


Equinix data center in Secuacus, New Jersey. 


(U//FOUO) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 
discussed preservation of materials, |had no knowledge of the email or any request by any entity 

to preserve CESC related data. 
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(U// FQfcf6l [ has no recoHection of a conference call on March 25,2015 or March 31, 2015 

with CESC J stated CESC never requested their email content by deleted, wiped or shredded. 


(U/ /FOUO) r I was unaware of any PRN employee conducting manual deletions of the 


DATTO device used to back-up the CESC email server, 

(u//Fewe; 


Jwas unaware of any successful computer intrusion of the CESC server, 

will be maintained in a 


(U// FQUQ) Notes of the interview and documents displayed to 
FD340 envelope and filed with the captioned investigation. 
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Date of transcription 6/29/2016 


On June 29, 2016 


Special Agenlsl 
the call, was[_ 


was interviewed te 


lAssistant to President William J. Clinton^_ 

enhonica llv by Feder al Bureau of Investigation (FBI 


Representing 


and also present for 
I from The Department of Justice 


(DoJ) Counterintelligence and Export Control Section also participated i n the call. Aft er being advised of 

the identities of the interviewing agents, and the purpose of the interview,_provided the 

following information: 


b6 

b7C 


didf 


n i/ /rnii n 


ever use Tor. 


Iwas not f amiliar with Tor, which enables anonymous communication, nor 
described herself as a “very low tech person.” 


(u/ /rou e)| 

her @presidentclin 

occasions, a laptop._ 

computer at the Clinton Foundation 
was not sure of the specific version 
sign onto her email. 


,used various communication devices and computer to remotely sign into 
on.com emai l account. These devices included an iPhone, BlackBerry, and on rare 
' fclso accessed her @presidentclinton.com email account from her desktop 


p desktop computer operated off of Windows, but she 
Tiurther stated that she used an Apple Mac on occasion to 


he 

hie 

he 

hie 


(U// F0U0 1 


□id not recall experiencing any unusua 


^- T_l n 

related to her @presidentclinton.com email account in January, 2013. 
January 5, 2013. 


spam or ph ishing email activity 
Iwas in New York on 


be 

b7C 


(U/ /FOUO) A copy of the original interview notes are attached in a 1A envelope. 
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On September 14, 2015J 
social -seenrit y numberl 
Agent (SaC: . land SaI 


Platte River Networks, date of birtlf 


I from 


jw as interviewed by Federa l Bureau of Investigation (FBI) Special 

__Also present for the intervi ew was 

and Department of Justice (DOJ) Attomev l I 


■ I I I * --N / -- J I I 

After being advised of the identity of the interviewing agents and the nature of the interview. 

■ j.j tt. . r.11 • 


provided the following: 


In February or M arch 2013 J 


Lvas informed by 


at Platte River Networks (P LNL of a potential contract managing email for a high 

profile client, but did not know who the client was._was not involved in the proposal or technical 

solution for the client, nor did he have, anv first hand meetings witt^ anyone representing t he client 


and 


* 


andled those matters. 


eventually learned the client was WILLIAM CLINTON and HILLARY CLINTON (CLINTON), doing 
business through a company named CESC. At some point during the process, CESC conducted 
background chec ks on the individuals who w ould provide the technical suppo rt for the contract. Those 
individuals were I J and I did not know why CESC 


conducted the background checks, but assumed it was because they were a high profile client. 


On or about March 2015, 


_first learned about concerns regarding CLINTON’S use of a 

private email server when it was reported by the media. Due to this increased attention, PRN decided to 
place Internet Proto col (IP) co untry blocks and took other additional steps to secure the CESC server, in 
the same timeframe] (participated in a conference call with CLINTON ’S counsel, Williams and 


Connolly, to determine where CLINTON’S email was stored. While]_[vas on the call, 


W 


g _ _handled most of the questions. Subsequently, PRN received a preservation 

letter from the United States Senate and a preservation request from the FBI. PRN brought their own 
counsel on board to assist with these requests. 

After receiving the FBI’s preservation request, PRN received a letter from Williams and Connolly 
instructing them to give the FBI the CESC server used prior to migrating email to PR N acfluiretl 
equipment . ’ * " - — - 


_ traveled to New Jersey and turned over the server to the FBI. 
did not power up the server before providing it to the FBI. 


Stated 


The CESC email server architecture also involved a DATTO backup appliance. The DATTO was 
configured to store backup data locally, however, due to a glitch, DATTO backed up data to their cloud 
for a period of time. On or about August 24, 2015, DATTO sent PRN a letter stating they would stop 
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backing up to their cloud and preserve what was in their possession. The DATTO has a 60 day purge 
cycle, therefore, DATTO should have data from 60 days prior to August 24, 2015. 



itated 

and 



email server project 


classified information on the server 


_.would have specific details regarding the CESC 

never heard anyone related to the CESC project discuss the existence of 
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£rrs 


date of birthl 


Special Agents (SA)I 


jand Sa[ 


was interviewed 


(U//F OUO) On May 23, 2016 
by Federal Bureau of Investigation (F 
at the offices of Platte River Networks fP RNl located at 570 0 Washington Street, Denver. Colorado 

80216. Also prese nt for the interview w as_and via speaker phone,[ 

both attorneys at the 


b6 

b7C 


the nature of the interview! 


After being advised of the identity of the interviewing agents and 


provided the following information: 


(U// FOU 0) 


was not aware of a laptop containing an ar chive of e mail belonging to 


FIILLARY CLINTON that was shipped to PRN around February 2014. 
became of the foregoing laptop. 


was not aware what 


(U/ /FOUO) 


only recently was made aware of a CLINTON email archive file being 


tr ansmitted to the Clinton Executiv e Services Corporation (CESC) around July 2014 and September 201 


b6 

b7C 


b6 

b7C 




as it was occur ring 


was not aware of the request by CESC, or transmittal by 


was not aware 


fulfilled the request! 


of what specifically was requested by CESC or exactly how 
never spoke with anyone at CESC. 


(U//F0W©) 


2014 to January 2015| 
records. 


wa s not aware of any support PRN provided the CESC client from October 
was not aware of any CESC request to delete, wipe or shred their email 


b6 

b7C 


(U/ /FOUO) At this 
the March 2015 timeframe.! 


point in th e interview, Agents displayed PRN provided records and email from 
provided the following information: 


b6 

b7C 


(U// PQUO ) In March 2015, when various media outlets reported a private email domain and 
server was used by HILLARY CLINTON, PRN decided to create an internal “share drive” and control 
access to only the PRN employees working the CESC account. PRN never deleted information pertaining 
to the CESC client and provided the FBI all records they maintained pertaining to CESC. 


(U/ /FOUO ) In March 2015 J 


stated PRN employee 


tn 

id 


travelled to the 


Equinix data center to check the security of the servers and to ensure they were “locked tight.” After the 
media reports, PRN was even more concerned about the security of the server. 
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(U/ /FOUO) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 


discussed preserv ation of ma terials. 


CESC related datal 


_J could not recall any other request by any entity to preserve 

Jreceived guidance f jnm PRN attorneys and understood CESC client 
information and records should not be destroveq 


to CESC records and not necessarily email content, 
request from the government. 


believed the preservation request applied more 
Relieved the preservation request to be a 


(U//F OUO) 


31. 2015 with CES q 
shredded. had a memory of a request by 

ting, but could 


working, but could not recall the specific request, 
policy changed to 60 days. 


pad no specific recollection of a conference call on March 25, 2015 or March 
stated CESC never requested their email content by deleted, wiped or 
ESC to confirm their server back-ups were still 

was aware CESC wanted their email retention 




was unaware of any successful computer intrusion of the CESC server. 

will be maintained in a 


(U//F OU Q~) Notes of the interview and documents displayed to 
FD340 envelope and filed with the captioned investigation. 
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Date of transcription 08/17/2015 


On August 17, 2 015, KATHERINE M. TURNER, Partner at the law 
offices, of Williams & Connolly LLP, 725 12 th Street, N.W. Washington, 
D.C. met at her place of employment with Agents of the FBI to discuss 
voluntarily turning over six (6) laptop computers in her possession 
know n to contain To p Secret classified information. Also in atte ndance 
were 


I 


of the FBI's Office of General Counsel, 


Department of Jus tice, f 
Connelly LLP, and|_ 


Trial Atto rney for the Count erespionage Section at the 


an attorney with Williams & 
counsel for CHERYL MILLS, from the 


law offices of Paul, Weiss, Rifkind, Wharton & Garrison LLP. 


b6 

b7C 


Prior arrangements had been made to meet at this time and place 
to discuss an agreement through which Williams & Connelly would 
voluntarily turn over to the FBI six (6) laptops computers used by the 
firm to view email communications from the private server of former 
Secretary of State HILLARY CLINTON. TURNER acknowledged that these 
laptops contain Top Secret email communications and attorney/client 
privileged communications. TURNER sought to turn over the laptops as 
soon as possible but wished to ensure that privileged communications 
on the laptops would remain confidential. TURNER declined to provide 
consent to search the laptops and wished to arrange for secure storage 
of them in a manner agreeable to both the FBI and the attorneys. The 
FBI agreed to provide TURNER with a draft letter outlining the 
proposed conditions of storage as soon as possible. 


Contrary to statements made on August 6, 2015, TURNER advised 

that only five of the six laptops are in the posse ssion of Williams & 
Connelly, the sixth being in the possession of 


counsel for CHERYL MILLS, former Chief of Staff for CLINTON, 
admitted that the computer in his possession has been connected to the 
Internet on numerous occasions subsequent to being loaded with the 
classified email communications of HILLARY CLINTON. This laptop was 
possessed by CHERYL MILLS but utilized by HEATHER SAMUELSON, an 
attorney on her staff, to conduct a review of approximately 60,000 
emails origi nally con tained on CLINTON'S private email server. 


According to 


SAMUELSON deleted CLINTON'S personal emails 


b6 

b7C 


Investigation on 08/17/2015 


at 


Washington. D.C. 


File# 


b3 

b7E 


Date dictated 


N/A 


By SAJ 


d 


b6 

-b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency;.it 
and its contents are not to be distributed outside your agency. 





FD-302a (Rev. 10-6-95) 


Continuation of FD-302 of 


Interview of Katherine M. Turner 


O n 08/6/2015. Page 


from the original 60,00 0 resultin g in the 30,490 emails eventually 


turned over to the FBI. 


claimed the other emails had been 


deleted from the laptop but was unable to specify whether they had 
been forensically wiped to an unrecoverable state. 


Both | and TURNER admittGd that the emails contained on 
these laptops had been viewed by attorneys who did not have a security 
clearance at the time they reviewed the material. TURNER said the 
emails did not contain classification markers and thus they were not 
aware that they were classified at the time. 
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(U/ /TOU 0) On December 10, 2015 


date of birtH 


of the 


Office of the Legal Adviser, Financial Disclosure Di vision. U.S. Departme nt of State was intervi ewed by 
Federal Bur eau of Investig ation (FBI) Special Agents l and | Also 

nresent we rd JTrial Attorney, Public Integrity Section, U.S. Department of Justice and[ 


Attorney Adviser, U.S. Department of Stat e. After bei ng advised of the identities of the 


interviewing agents, and the purpose of the interview, 


Jprovided the following information: 


(U//FOU©) In 2009 


worked as an Ethics Analyst for the U.S. Department of State. 


She was responsible for reviewing the Financial Disclosure Forms (SF-278) of new and current 
employees to assess if their investments, or outside i ncome sourc es, created a conflict of interest with 
their position at the U.S. Department of State. When_had questions about the filer’s SF-278 


she would c ontact them directly, either telephonically or via email, to clarify the filer’s responses. 

vould then amend the SF-278 to reflect any corrections or clarifying information provided by 


the filer. She would then send a copy of the updated SF-278 to the filer for their personal records. Once 
the .SF-278 was finalized an assessment was made on whether the filer’s investments, or other financia l 
interests, p osed a potential confl ict of interest. The assessment was then signed off on bj 
supervisor, | Upon completing the review a physical file containing the SF-278 and 


supporting documents were maintained for a finite period of time before it was destroyed. 


(U//F©U0) 


was shown copies of the following documents: 


New Entra nt SF-278 su bmitted by BRYAN PAGLIANO on April 15, 2009 

Email frorr to PAGLIANO dated August 25, 2009, with the subject “Ethics 


Clearance... (Reply Requested)” 

New Entrant SF-278 submitted by BRYAN PAGLIANO on April 15, 2009, with 
handwritten updates 

Incumbent SF-278 submitted by PAGLIANO on April 4, 2010 


(U/ /FOUO ) After reviewing the documents] 


confirmed that she had sent the above 


referenced email to PAGLIANO to clarify some of his responses on his original SF-278.| 
provided that the email contained her original message to PAGLIANO and did not appear to have been 
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altered in any way. 


also confirmed that it was her handwriting on the updated New Entrant 


SF-278 form and that the handwrit ten notes reflected additional information provided by PAGLIANO in 


response to her email. 


could not recall any additional info rmation about her exchange with 


believed that 


PAGLIANO, aside from what she had written on the updated SF-278. 

PAGLIANO had provided the updated information to her via email but she no longer had t hose emails 
because she purged her emails when she changed positions at the U.S. Department of State, 
further noted that the physical file could not be found and had likely been destroyed. 


(U/ /FOUO) 


she did not conduct the review of that document 
stated that they were not her handwriting. 


fe vie wed the Incu mbent SF-27 8 form filed by PAGLIANO and noted that 

pointed out the checkmarks on the form and 


bid not know who reviewed the form but stated that 


should be able to identify the reviewer based on internal computer records. 


(U//FOU©) With respect to the Incumbent SF-278 form filed for 2009j 


stated that all 


income and compensation from 2009 should have been captured in Schedule A. This includes any 
income in th e calendar year, even if it was received prior to his start date with the U.S. Government. 

noted that the only exception to this would be if the income was from another government 


entity. However, income from a political action committee or another campaign related organization 
would not qualify as other government employment. 


(U// FOU e) 


noted that in 2009 the filer would h ave been pro vided with several pages of 


provided an electronic 


instructions on how to correctly and accurately complete the form, 
copy of the instructions to the interviewing agents. 

(U// FQU Q ) A copy of the above referenced documents and the original interview notes are 
attached in a 1A envelope. 
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On September 2, 2015, 

Homeland Security Investigations (HSI 
Security (DHS), Norfolk Virginia, was interviewed 


a Special Agent with 
Department of Homeland 
at the Federal 


Bureau of Investigation (FBI). After being advised of the id entity of 
the interviewing Agent and the nature of the interview, 
provided the following information: 


| _ | was previously an agent with t he U.S. D epartment of 

State, Burea u of Diplomatic Sec urity ( PS). I I left DS in 

approximately spouse,| was also a 


prior DS agent who., from 20 07-20 09, served as an Assistant Shift 
Leader on former Secretary of State COND OLEEZZA RICE'S and HILLARY 

CLINTON'S protective details. _ served briefly on former 

Secretary CLINTON's protective detail i n 2009. From her own 
experienc e. and information obtained through and other agents, 

_ described a "stark difference" between RICE and CLINTON with 

regard to obedience to security and diplomatic protocols. RICE 
observed strict adherence to State Department security and diplomatic 
protocols while CLINTON frequently and "blatantly" disregarded them. 
For example, it is standard security and diplomatic protocol for the 
Secretary of State to ride in the armored limousine with the local 
U.S. ambassador when traveling in countries abroad. It is seen as 
diplomatic protocol for the Secretary of State to arrive at foreign 
diplomatic functions with the local ambassador; however, CLINTON 
refused to do so, instead choosing to be accompanied in the limousine 
by her Chief of Staff, HUMA ABEDIN. This frequently resulted in 
complaints by ambassad ors who w ere insulted and embarrassed by this 

breach of protocol. _ explained that CLINTON'S protocol 

breaches were well known throughout Diplomatic Security and were 
"abundant." 


CLIN 


explained that ABEDIN possessed "much more power" over 
TON's staff and schedule than other former chiefs of staff. 

believed that ABEDIN herself was often responsible for 


b6 

b7C 


b6 

b7C 


b6 

b7C 


overriding security and diplomatic protocols on behalf of CLINTON. 
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On a trip to Jakarta, Indonesia, in early 2009, CLINTON requested 
to visit an area of Jakarta that presented security and safety 

challenges. This visit was reportedly for a photo opportunity 
regarding CLINTON'S "clean cooking stoves" initiative. The DS advance 
team recommended against traveling to this area because the route 
could not be secured and was lined with dangerous circumstances and 
individuals. As such, the DS advance team recommended in writing that 
this excursion be stricken from the schedule but were told by DS 
management that it was going to happen because "she wanted it." DS 

agents felt this excursion into potentially hostile areas placed 
CLINTON, her staff, the media, and her security detail in unnecessary 
danger in order to conduct a photo opportunity for "her election 

campaign." DS agents had the perception that CLINTON was using her 
position as Secretary of State to campaign for President of the United 
States. DS agents felt CLINTON traveled with hand-picked media who 
would present her in favorable light in order to garner political 
support. It was also believed that CLINTON disregarded security and 
^■ipiomatic protocols, occasionally without - regard for the safety of 
her staff and protection detail, in’order to gain favorable press. 

CLINTON traveled in an armored vehicle whose passenger windows do 
not open. This is a design feature for the protection of the 

occupants. However, the driver's window does open slightly. On one 
occasion while travelin g to Palestine. CLINTON ordered the limousine 


driver, believed to be 


to open the window while in 


"occupied territory", reTSTTTng to a dangerous area of the West Bank. 

declined to respond to CLINTON'S request; however, 
repeated demands by CLINTON forced him to open his window despite the 
danger to himself and the occupants. 


, explained that security and diplomatic breaches were 

often communicated from the foreign post back to the Department of 
State via cables from the Regional Security Officer (RS O) . Thf-sp 
cables often described incidents like those described above. 


recommended interviewing current and former RSOs from foreign posts 
visited by CLINTON during her tenure for more detail into these and 
similar events. 
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Early in CLINTON'S tenure as Secretary of State, she and her 
staff were observed removing lamps and furniture from the State 
Department which were transported to her residence in Washington, D.C. 
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_|does not know whether these items were ever returned to the 

government upon CLINTON'S departure from the State Department. 


Despite having her own DS security detail, CLINTON continued to 
utilize a Secret Service security detail while at her residence in 
Chappaqua, New York. DS security would meet Secret Service security at 
the airport in New York and turn over protection to them. This 
practice was unknown to DS prior to CLINTON's tenure and often 

presented logistical problems to both services. _ explained 

that CLINTON'S treatment of DS agents on her protective detail was so 
contemptuous that many of them sought reassignment or employment 
elsewhere. Prior to CLINTON'S tenure, being an agent on the Secretary 
of State's protective detail was seen as an honor and privilege 
reserved for senior agents. However, by the end of CLINTON'S tenure, 
it was staffed largely with new agents bec ause it wa s difficult to 
find senior agents willing to work for her. claimed to have 

had at least one conversation with Secret Service agents who 
experienced the same poor treatment. 


Inside CLINTON'S office at the Department of State there is a 
security checkpoint known as "Post 1." Post 1 is staffed by a 
uniformed DS officer and a DS agent and provides security to CLINTON'S 
inner office. CLINTON'S office is a Sensitive Compartmented 
information Facility (SCIF) and Post 1 is located within that SCIF. By 
DS security policy, no cell phones are allowed inside the SCIF and DS 
agents, officers, and staff are required to leave their cell phones 
outside the door in secure lockers. CLINTON refused to abide to this 
security requirement and brought her cell phone, believed to be a 
Blackberry, inside the SCIF where a DS agent assigned to Post 1 was 
required to guard it. DS agents were indignant that they were required 
to follow security policy but CLINTON made herself exempt from the 
same regulations. 
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fedefUl bureau of investigation 


Date of transcription 2/11/2016 


(U// FOUO) On February 10, 201 bf 


Federal Bureau of Investigation (FBI) Special Agents! 


offices of Latham & Watkins LLP, 885 3 rd Ave, New York City, NY. Also present werel 


DOJ 


and 


was inte rviewed by 
at the 1ft w 
and 


and the purpose of the interview, 


of Latham & Watkins. A fter being advised of the identities of the interviewing agents 


provided the following information: 


fU//FOUOJ is currently a] 


and s| at 

He was formerly th 



|at the Department of Defense (DoD) from] 

Prior to the DoDj Fas at the 

National Security Council'(NSCI froml until 


ifrom 

to the Fall ofl II 

from until early 

and then 


(U//F0H0) 


provided that there were typically three to five Deputy Committee (DC) 


meetings a week, up to four Principal Committee (PC) meetings a week, and NSC meetings with the 
President as needed. Additionally, there was a weekly l unch betwee n Secretary GATES. National 
Security Advisory DONILON and Secretary CLINTON provided that 


the DoS representative for DC meetings and Secretary CLINTON was the DoS representative for PC and 
NSC meetings. 


(U// FOUO ) While at the NSC 


was responsible for working with the meeting 


participants, to in clude the D epartment of State (DoS), to coordinate and plan for each upcoming meeting. 
More specifically, T would review memorandums, prepare meeting packages and control the flow 

of inform ation betw een the agencies. These interactions occurred through both formal and informal 
channels]_|provided that with respect to DoS matters he primarily worked with JAKE 


SULLIVAN and JOE MACMANUS. 
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(U//FOUO) Prior to each DC and PC meeting the NSC would notify the participants of the 
upcoming meeting and ask that th ey submit t heir meeting packages in advance so that they could be 
distributed as read ahead material. 


stated that he routinely worked with SULLIVAN to ensure 
that DoS a gendas, talking points, and formal documents were received in advance of each meeting. 

noted that he would sometime provide relevant documents, such as ODNLassessments, to DoS 
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for their use as they prepared their meeting packagesj_stated that the classification level of the 

packages was dependent on the content and could be unclassified, classified or a mix. Documents and 
meeting packages were typically transmitted between agencies via the appropriate email system, secure 
fax (i .e., Washfax) or couri er servi ce. 

(U//FOUO) Following each meeting an NSC staffer would take notes and then prepare a 
Summary of Conclusions (SOC) that summarized the issue discussed, supporting and dissenting opinions, 
the final outcome arid any necessary action items. The SOC would then be approved by the NSC 
executive staff before being distributed to the meeting participants. 

(U//FOUO)_was not aware of how or where the NSC archived the SOC and related 

documents for a specific DC of PC meeting. ■ 

(U//FOUO)_was shown several emails that were sent in preparation fo r an Octobe r 2009 

PC meeting regarding the U.S. strategy in Pakistan. However, after reviewing the emails ! stated 

that while he remembered the topic in general he could not.recall the specific PC meeting in question. He 
noted that at that time there were numerous meeting on the subject Similarly] ;ould not recall 

the details of any of the documents referenced in the emails. While) [could not comment on the 

specifics of the emails he did note that the emails were representative of the communications that .were 
exchanged between NSC and DoS as they were preparing for a PC meeting. 


(U// F0UO 1 
meeting. However! 


the limited content of the email. 


was shown an email that was sent in preparation for a June 2011 PC 
could not recall any specifics regarding the PC meeting in question given 


(U//FQUO) A copy of the original interview notes and the referenced emails are attached in a 1A 
envelope. 
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(U//FO«©) On 1 0/23/2015 Speci al Agent (SA1 

-Investigation / FBU. DObI " j SSAN_ 

and SA in FBI Headquarte rs. . 

interviewing Agents and the nature of the interview] 


Federal Bu reau of 
]was interviewed in person by SA | 
ifter being advised of the identity of the 

provided the following information: 


UJ// FOU O )! began working for Department of State’s (DoS) Diplomati c Security 

Service fDSSt in_where he was assigned to the DSS Los Angeles Field Office. Ini 

_ was selected for an as signment with the Secretary of State’s security detail_ 

served on the Secretary’s detail until when he joined the FBI as an SA and attended FBI 

new agent training. 

(U//F OU Q) When__ began his stint on the Secretary’s detail CONDOLEEZZA 

RICE, was the Secretary of State,_detail assignment carried over to HILLARY 

CLINTON, when she was appointed Secretary of State in 2009. 

(U// EOUO) DSS covered the majority of CLINTON’S protection while she was in the 
Washington, DC, area. However, when her husband was in town. United States Secret Service (USSS) 
would cover the bulk of the protection detail responsibilities when she was with her husband or in the 
residence, 

(U//F OU O) USSS would provide security for CLINTON’S 3067 Whitehave n Street NW. 

Washington, DC, address during the day and DSS would cover the overnight detail._was 

never inside the CLINTON’S Whitehaven residence, as DSS usuall y posted in a veh icle outside. 

CLINTON had a secure telephone in her Whitehaven residence and]_assumed it was in a 

secure room. 


(U//FOUO) CLINTON usually traveled to her home in Chappaqua, NY, via a US Airways shuttle 
from Reagan National Airport (DCA) to Westchester County Airport in White Plains, NY, USSS would 
handle CLINTO N’S security in N Y, and DSS would have a small presence to maint ain CLINTON’S 
communications. was never inside CLINTON’S Chappaqua residence, 

was kn own as the CLINTON’S Chappaqua “house guy/scheduler.” The security detail would often 
contact_to determine the Secretary’s departure time. 
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(U// FOU & ) The Secretary’s security detail chain of command was as follows: 


1 Special Agent in Charge (SAC) 

4 Assistant Special Agents in Charge (ASAC) 

3 Shift Leads (SSA) 

Approximately 45 SA’s assigned directly to detail shifts 


jimm 



was the SAC during CLINTON’S tenure as Secretary 


were two ASA C’s during the sam e time period 


agents assigned with[ 
all still employed with DSS (possibly in the Washington Field Office). 


1- 

■_l 

to 

> /\, anu ucun 

CLINTON’S d 

1_| 

:etail. 


■anal_ 

1 and 1 

_Ewere snm 


are 


(U//FOU©) CLINTONS office was located on the 7 lh floor of DoS Headquarters, The entire 
Secretary’s suite was a Sensitive Compartmented Information Facility (SCIF). The DSS security 
detachment maintained a Post directly outside the Secretary's office. The DSS space was known as Post 
One (1). DSS personnel were not authorized to bring their mobile phones into Post 1, as it was located 
within the SCIF. CLINTON did keep a mobile phone inside a desk drawer inside Post 1, but when she 
would remove the phone from the desk, she would take it to a non-SCIF space to make calls or use the 
phone. 
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(U//P©fcfe) HUMA ABEDIN and CHERYL MILLS were among CLINTON’S staff members 


who had offices located within the 7 


th 


flop r Secretary’s SCIF. In addition to ABEDIN and MILLS, 
and JAKE SULLIVAN, were part of CLINTON’S main 
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Traveling crew.” MILLS did not accompany CLINTON on many overseas trips. 


(U// TOUO ) 


could not recall the specifics surroundin g the electronic d evices used by 


CLINTON'S executive staff, but he assumed they were BlackBerry devices 


did not interact 


with CLINTON nor MILL S via email, but sometimes he would receive a forwarded email with their 


accounts listed in the chain. 

CIintonfoundation.org accounts 
originating from a Gmail account, however, he was not entirely sure. 


reme mbered receiving email chains that contained 
also thought he recalled seeing emails from| 


bs 

bic 


(U//F QU O) In addition to the Secretary’s DSS security detail, CLINTON also traveled with a 
team of Security Engineers who were specifically assigned to her staff. These Security Engineers would 
travel overseas with CLINTON for the specific purpose of setting up and maintaining her 
Communications while on travel. The Security Engineer Team generally set up a secure communication 
post inside the Embassy, or a hotel room adjacent to where the Secretary would stay. T he communication 
post would be manned 24 hours a day. 
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(S//WF) The team of Security En 
Secretary’s communications via dmlom 

bl i 

igineers would send the necessarv eauioment to set up the 

atic pouches 


i- r 

\s it relates to the 

Secretary s use ot Diplomatic touches,] 

j was unaware ot the process and procedures related 


to the preparation and transport for overseas travel. 
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(U//F OUO) When traveling overseas in advance of, or with, the Secretary, the Regional Security 
Officer (RSO) would usually provide CLINTON'S security detail a letter, prior to, or on arrival. The letter 
provided guida nce on what to expect from a security standpoint while in a particular country. 

I was not sure if a similar letter from the RSO was provided to the Secretary and/or her 
executive staff 


(U// FOUQ) The Secretary's security detail would “hotwash” after an overseas trip, to compare the 
advance team’s preparation to what actually took pla ce during the Secretary’s travel. The RSO was not a 
part of these after action discussions._believed an RSO would send a cable to the RSO 


assigned to the Executive Office at DoS Headquarters if there were any security issues concerning 
CLINTON and/or her staff 


hS 

hie 


(U// FQUQ ) Agent notes are maintained in a 1A envelope. 
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United St ates Depart ment of State fSTATE) . 515 22 nc S treet NW, 'Wa shington, 


D.C. 20037 
date of birt tl 


office teleph one (202)1 


mobile telephone (202 


emai 


was interviewed on his mobile telephone by FBI Special Agent! 


I C—b 




.aie.cov. 


After being adv i sed of the identity of the interviewing Agent and the nature of the interview. 


provided the following information: 
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The Information Programs and Services (IPS), Bureau of Administration oversaw the program for 
Congressional inquiries and Freedom of Information Act (TO I A) requests. The House Select Committee 
on Benghazi requested emails to or from former Secretary of State Hillary CLINTON related to Benghazi. 
It was determined there were 296 emails related to the Benghazi request. After IPS officials performed 
their review of the 296 emails, they referred emails for classification determination to four outside 
agencies, specifically the: 1) FBI; 2) CIA; 3) Department of Defense (DoD); and 4) National Security 
Council (NSC). 


IPS officials have regular points of contact (POCs) at all agencies and STATE bureaus that the 
IPS would send classification determination referrals to in response to Congressional or FOIA requests. 


-FBI: 

-CIA: 


1 " 

-no contact information nrovided. 

-no contact information provided; 



IPS team,| 

- DoDl 
provided. 


boss was 


■the CIA’s FOIA branch similar to STATEN 


email wad 


hnuciawov. 


Offi ce of the Secretary of Defense (OSD)—no contact information 


retired n ow, hut was the PO C earlier in 


was processed. NSC's current POC w ai 






believed 


Ltplephone 20: 


ght inform, 

Legislative Affairs, if contacted by the FBI. 


[tele 

Jmi 



he Benghazi request 
email 

l 

and 


Before IPS conducted their review of tire Benghazi request] 


Attorney ^ Offi ce of the Leg al Adviser performed their own, independent review of the 296 Benghazi- 


related emails, 
a classification determination. 


rev iew team used different POCs at other agencies to review the 296 emails for 


did not know why: 1)1 


team did a review, as that-was 
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IPS' purview; 2) why 

team used c 

afferent POCs than the regular POCs IPS used: 3i what 

review' criteria and/or parameters 


team used during their review'; and 4) why team 

reviewed and produced tire 296 emails to the House Committee prior to IPS conducting their formal 
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review. 


Jteam used reviewers from the foll owing agenc ies: 1) Department of Justice (DOT); 2) 

team's PCCs were as follows: 


CIA; 3) DoD: and 4i White Ho\b c Counsel ('W HO. 
- DO! 


---islephoae 202 


- CIA: When asked direetlv who the C.fA reviewer was. 


and her team stated they did 


□ordinate thr ough the CIA hot, to date, h ad not given a name lor wh o their CIA reviewer was. 


-DopJ 


telephone 70: 


vtto tn 
_j email 



5miail.miL 


1_L 


- WHC; 


1— telephone 2(L 

email 

Iff who, eon, g 


Jdid not know why 


the WHC instead of the NSC, 
the wrong POCs. 1 


instead of the NSC. 



Stated that 


team used & POC at the DOX instead of the F BI and a POC at 
Mfini to provide his thoughts on why he thought they used 
.earn made a “rookie mistake’" when they used the WHC 
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summed up tire issue with the different POCs as 
referred the 296 emails to the NSC., FBI, CJA and DoD wbereaaj 
to the W’ 
team and 


fustrating a nd again pointed out that IPS 
team referred the 296 emails 


K2 DPI. C iA. and DoD, and none of the referents were known to be the same between IPS ' 
team. 
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federal bureau of investigation 
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D.C. 20037, ofries teleph one (202)1 
date of bi rth. 


mobile telephone (202) 


was interviewed in person by FBI Special Agents! 


etnat 


ko5tate.gov. 


the folio wine inform a non; 


for Margaret “Peggy ft GRAFBLD, Deputy Assistant Secretary, who was responsible for 
ovemeemg 400-500 employees who work ox's matters related to foe Freedom of Information Act (FOIA). 
the Privacy Act, arid information management for STATE. A/GIS was the office that provided guidance, 
usually through memorandums, that oversaw records compliance for all STATIC employees. A/GiiS also 
oversaw the coordination, production and maintenance of STATE’S Foreign Affairs Manual (FAME 
though A/GIS was not responsible for the FAMA content 


Joyce BARR, Assistant Secretary, Bureau of Administration, was 
GRAFELD's boss and immediately subordinate to Under Secretary for Management Patrick KENNEDY. 


in or around August 2014, 


in Legislative Affoirs to work review and production matters related to inquiries from tbs- House 


Select Committee on BenshaaL 


STATEfo Legislative Affairs, ft was around that time that 


learn about records production an d the FOIA process. Around the same time. 


telephone call from 


A ttorney. Office of th e Legal Ad viser, wh o asked: 


anv CLI NTON -r elated e mails in t he 


request. 


tenswere 


.pst file that 


started fo 




f there were 


that there were CUNT ON-.related emails in thd 


pad f rom a prev ious FOIA 
,oA file. 


The Information Programs and Sendees (IPS)* Bureau of Ad mini stiadon oversaw the FOIA. 
program, hi or around November or December 2014. in response to a FOI A request, IPS officials* were 
notified they would pick-up 14 banker boxes of emails at former Secretary of State Hillary- CLI NTON A 
office related to CLINTQN's use of personal email to conduct official STATE business. Later J _ 


be 

b7C 


_-at FBI Headquarters. 935 Pennsylvania Avenue Northwest, Washington. D.C. 20533. A lter 

being advised of foe identities of the Interviewing Agents and foe nature of the interview] [provided 


started working at STATE ir| 


[and since! 


was the 
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to oick-ufj only Y > boxes at Williams Sc Connolly, LLP. On or around December 4 , 2014, 


jp,ieked~up 12 boxes at Williams & Connolly. 


and IPS be 

officials were unsure what happened to the other two boxes. The items in the boxes were stacked with no b7c 
folders or known method of oraanixation. 


[Global Pu blishing Solutions, who used classified copiers and made two-sided 

, a copy for officials in SIXTH Executive 


copies of all recei ved materials lor_ 

Secretariat (S/ES). and a couple of copies for IPS officials to use for their FOiA review. The original 
emails were shrink-wrapped and placed in a sensitive compartmented information facility in Newington. 
Virginia. 


In March 20IS 


first beard of issues with the CLINTON-related FOIA. process. 


[the FOiA program. The normal FOIA process would be where IPS 
received a FOIA request then IPS forwarded that request on STATE forma via email to rite person who 
the FOIA request peri weed to. The pertinent party would then fill out the form and provide the IPS office 
the requested Items, which the IPS office then reviewed prior to a release of the information back to the 
initial requestor. In the CLINT ON-related FOIA case, IPS received an unprecedented amount of emails 
in hard copy form, as there were 52,455 work-related pages to review. In a letter hand-delivered to 
KENNEDY by Cheryl MILLS, or MILLS' attorney, it was stated, An an abundance of caution, they 
overproduced." 

Separate from the CLlNTON-reiated FOI A request, there was a Congressional request for 
CLiN'fON-related emails related to the Benghazi incident from the House Select Committee on 
Benghazi. A review was conducted of 296 amahs, probably bv pe rsons who wo rked in f[ re Bureau of 


Legislative Affairs and Office of the Legal Adviser. 


stated 


[and 


ndie 

_|w< 


would know 


why and how those 2516 specific emails were picked and why and how they conducted their own review, 
separate from any review the IPS uni t conduc ted. Previously, IPS ha<l always been in charge of 


Congressional document production; 
Legal Adviser would normally only wei 
conduct the review and production. 


Lated attorneys from Legislative Affairs and Office of the 


the material with STATE bureaus and other a&easres. After their own review was finished 


produced the requested material for the House Committee, prior and independent to the IPS 


anil’s formal review. 


stated those involved at IPS felt the T h floor, or leading STATE officials, bad their own 
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b6 
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b6 

b7C 


in on t he legality and scope of requests, but IPS would actually 
land] (stated they coordinated the srop gr review o f 

and 


ideas on how to formally review the 296 emails. KENNEDY'S initial idea for how to review the 296 
email was as follows; 1) the IPS officials conduct a. review; 2) IPS officials referred items to other STATE 
bureaux and Inter-agency partners for their review; 3} IPS officials received the referral determinations 
and submitted to the House Committee. The review process that was finally decided upon was at 
follows; 1) the IPS officials conduct a review; 2} IPS officials referred items to other STATE bureaus and 
inter-agency partners for their review; 3} IPS officials received the referral determinations and submitted 


b6 
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m the Office of the Legal Adviser; 4} after the Office of the Legal Advisers review, then it would be 
submitted to the House Committee-. 


b6 

b7C 


In mid-March 2015 , IPS officials conducted their formal review of the 296 emails on their 
classified network, aka “€LASSNEX? : using their Freedoms System, aka M'25' IPS felt immense 
pressure to complete the review quickly and to not label anything as classified. In IPS’ initial review, 
they did not use a B{!) exemption on any of the emails. The B{3) exemption was used to exclude the 
public release of classified information or matters related to national security. IPS officials were told 
there was nothing classified In the 296 emails, so they shouldn’t use the B(l) exemption. 


However, from the formal review of the 296 emails, in total. 


thought there wore four or 


five STATE bureaus, such us African Affairs Bureau and the Near Eastern Affairs (NILA) Bureau, and 
five non'-STATE agencies, specifically the FBI, CIA, Department of Defense. National Security Council 
and White House Counsel that were sent referrals (items/emails) to conduct their own forma! 
dossitication review. The NBA responded that in the material th ey received there were four or five B( 1) 

redactions that needed to be made. After lie heard tins,_was frustrated and asked IP S officials if 

they were Agoing to challenge the desk officer from Maghreb 1 ' by using the .13(1) exemp tion. 
isked, "Who %t NEA upgraded if? Well need to explain cl&ssfficaiion to t hese nep okv 


multiple dmea 


experience with document prod 


already c oordinated with other agencies and 


action” 


stated 


a as previous 


Stated “NEA will change their B(I)s to B(5)s because 


they (NEA) didn’t understand bow to classify items.” A 15(5) exemption was not used for classified d ata. 
but rathe r for privileged communications, such as executive- or attorney-related privileges. or 

also stated, “it’s not classified until we uostade it.” 


The review officials that 


ana 


used for the review of the 29 6 emails w ere no- the 


same normal review officials that the IPS team use on a regular basis. Fo r example^ 

hut instead 
and 


did not use the IPS’ normal point of con met for the FB1,| 
the Department ofJusrice to count as the FBI reviewer. The mimes! 


anti 


used someone from 
_| stated they used 


and! 


used. 


reviews with at tire CIA. 


upon being asked directly, would not give a name of who they coordinated 


Throughout the process. 


pared if an email/item should have a B(l) exemption, then. 


PS would use a 13.(3) exemption. D espite that, at the end of the referral process, IPS was told to run 


; very thing bv Legislative Affairs and 


IPS officials fel t intim idated whe n t hey used o r suggested 


the use of the Bill exemntip n on any of the 296 emails. In addition to| 
and; 


bind 


KENNEDY 


were named as some of the STATE officials who pressured IPS employees to 


not label anything as classified. 
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for White Hous e C ounsel arid the Department of Defease were also not the regular reviewers the IPS team 


b6 
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In late April 2015, IPS officials completed the formal review of the Benghazi-related 
Congressional inquiry. All materials were ready for release at that time. The CIA provided redactions, 
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but none were deemed a B(l) exemption. Most of the items with CIA redactions wore emails from 
Sidney BLUMENTHAL. One item was d eemed clas sified a ccording to tir e FBI and KENNEDY held e 
closed door meeti ng attended by the FBE'j [and IPS’ 

KENNEDY asked[ 


amon g others. In that meeting, 


to change the EBEs B(l) upgrade classification, but 


did not change 

the FBI's stance. On May 22. if was decided by the IPS team they would keep the upgrade of the one 
FBI-related email and the IPS officials sent David KENDALL, Attorney, Williams <& Connolly. LLC, a 
letter informing him of the results. 


b6 

b7C 


b6 

b7C 


There was a powerful group of very-' .high-ranking STATE officials that some referred to as “The 
7 m Floor Group” or “The Shadow Government.” This group met every 1 Wednesday afternoon to discuss 
the FOlA process. Congressional records, and everything CLINTON-related to P 01 Afoongressional 
inquiries. The known regular attendees included Jonathan FINER. Chief of Staff for Secretary of State 
John KERRY, Jennifer STOUT, Deputy Chief of Staff, Heather FOX KjDJ BOTTOM, Deputy Secretary of 


Affairs 

Office of the Lean! Adviser overseeing STATE’s| 


Office of fee Legal Ai 

iviser. 

i 

1 _ 

md 




Normally, with larger FOlA. requests, such as with the CLIN TON-related FOlA request, IPS 

would schedule a rolling release.-that meant every few weeks or rnontp . the properly reviewed and 

approved material would be made public. However,_|_| and The T' Floor Group argued 

fee release should be done all at once in January 2016, for coordination purposes. While IPS officials did 
not have control of the release process of the 296 emails related to the House Select Committee or, 
Benghazi's request, they did have control for the release process lor the approximately 30,000 emails, or 
52,455 pages related to the CLINTON FOlA request, and it was decided to be a roiling release. 

On July 15/2015, IPS on-boarded Intelligence-Community Inspector General (ICIG) reviewers to 
help with tile overwhelming review process. The ICIG reviewers were trained up mid had.been integrated 
Into fee FOlA review process to help ensure IPS can meet hj 
redacted emails bv the Januarv 15.2016 deadline. To date, 
referrals already sent out for o/ssi Ikrufon determination. 


, re mand ated release of all non-exempt/non- 
was aware of approximately 305 


prated S/ES are the Custodian of Records for all Secretaries of State and Deputy 

As such, S/ES received all taskers from the IPS team related to FOlA requests that 


Secretaries of State. 

involve Secretaries of State or Deputy Secretaries of State. S/ES should also have answers regarding 
STATEN procedures that dealt with ifeormaLon technology :i including hardware and software for STATE 
em ployees' emails and telephones. Joseph M ACM ANUS, Executive Secretary 0 and Ambassa dor. S/ES, 


and 


S/ES. or 


someone in the S/ES Information Resourc e Manag ement (S/ES/SRM) unit should know specific details 


about CLINTON’S at-home server set-up. 


Server Operations. Center (ESOC) and ManagementTRM (M/ 
STATE servers. 


plated STATE servers were located at fee Enterprise 
would be knowledgeable about 


be 
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High-ranking STATE officials, described as some Assistant Secretaries and all Under Secretaries 
and higher, used a separate network .tor emails and record-keeping called the Principal. Officer Electronic 
Management System (POEMS). The vast majority of STATE employees were not on POEMS. 

| stated .he heard third-hand the National Security Agency (NSA) set-up a computer for b6 

CLINTON and the FBI should talk to S/ES about the specifics. Additionally, FBI should ask S/ES about b7c 

Jake SULLIVAN'S email being hacked, as maybe that had something to do with CLINTON'S emails or 
why the NSA set-up her computer. 
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ALL INEORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 10-05-2D1S BY J37J85T94 HSK 


FEDERAL BUREAU OF INVESTIGATION 


Dili*! of trA«sc.f 


>f Pi atte R iver Ne tworks. 5700 Washington Street. i)ci!vrr. 


emai 


Colorado. 80216, telephone (303) i _ _ 

Federal Bureau of Investigation Sp ecial Agei^t j 
advised of the identity of the agents 


U;:oiattenver.com. was contac ted in person bv 


identified himself ad 


iip3 


Afte; 


was 


Platte River Networks and 


stated that he had contacted the company 's legal counsel about the scheduled meetinu with the FB 


iulv 29. 2015, Counsel 


advised 


on 


not to answer questions from the FBI without counsel 


present. 


SA 


provide 

a < 


(aii 

£ t 


S.- 1 ! 



told 


to Interview would be necessary; however. SA 


;a document with instructions for Plane River Networks, 
jto an empty conference room. 


lieeded to 


invited both SAs 


i _provided a copy oi'a FBI preservati on letter t 

KabSe IV, Section Chief. Counterintelligence Division. _commented company 

wondered how long it would take for them to be contacted about the named account, 
el prificatio 
to 


ated July 27, 2015, signed by Charles H. 

5 had 
asked for 
[then read 


l_ 

p about the preservation letter and the responsibilities of their company. SA , _ 

a portion of foe preservation letter and explained (he FB I was not asking for any information 



at this lime, but that the letter was served in anticipation of future legal process. The Setter requested that 
Plane River Networks preserve any records to date which were identified in the aforementioned 
preservation letter. Agents also explained the request for non “disclosure. 


ex pressed h is conce rn about P latte River Networks becoming a target if tins matter ever 


became public. $A{ 


provided 


with her contact information at RBI Denver. 


was also provided FBI Strategic Partnership Coordinator (SPC) brochures that have 
information about Counterintelligence security awareness. Agents also discussed the FBF$ infragard 
program. 
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FEDERAL BUREAU OF INVESTIGATION 


Dak: oUranseripUtm 0& 07,2015 _ 

On August 6, 2 015, KATHERINE M. TURNER, Partner at the law 
offices of williams & Connolly LLP, 725 12 h:i ' Street, Nil Washington, 
U T C, met at her place of employment with Agents of the FBI pursuant to 
an agreement reached by correspondence between the Department of 
Justice and Williams a Connolly, This agreement (enclosed), reached on 
August 6, 2 015, provided that Williams & Connolly voluntarily turn 

over to the FBI three (3) thumb drives containing 30,490 emails from 
former Secretary of State Hillary Clinton's @clintonemail.com account 
as well as hard copy printouts of the emails and a laptop computer 
containing a duplicate electronic copy. 

At approximately 2;30PM, TURNER met Agents at the loading dock of 
her firm and transferred 22 legal boxes of documents to the FBI' s 

possession along with a laptop computer and three {3) thumb drives 

described in detail below and on the enclosed FD-941, Consent to 
Search Computers, and FD-597, Receipt for Property„ 

Item l: Lenovo Thinkpad T420, S/N PB-YCS12 12/03 

Item 2: Lexar Micro 16GB thumb drive, black and silver in color, 

S/N LTDTT16GB-000-1001DA (original) 

Item 3; Lexar Micro 8GB thumb drive, green and 'white in color, 

S/N LTDTT8GB~ 000 ~117 AU 

Item 4: Kingston SGB thumb drive, silver in color, S/N DTSE9 

Item 5-27 : 22 legal boxes containing paper copies of the above 

described 30,490 email communications 

TURNER explained that the original thumb drive, Item 2, was 

obtained from Platte River Networks but did not describe how it was 
collected or under what circumstances, TURNER described the other two 
thumb drives as identical to the original though one of the drives 
contained two complete copies of the email set. The laptop computer 
was previously used by the firm for unrelated matters but was believed 


Investigation on 
Lie * 


VVashhi<don. DC 


Bv SA 


Date dialed N A 


ThD document eon wins neither recommendations not conclusions of the FBI. U is the properly of the FBI and loaned to your ttgeney: it 
and its ooments aiv noi to be distributed outside your agency. 
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to have been cleaned of privi leged material prior to use and storage 
of the 30,490 emails. This laptop has not been connected to the 
internet, since being loaded with an electronic copy of the emails. The 
user name for the laptop is ".\internetonly" and the password is 
”InternetOnly!J". 

TURNER explained that the firm maintains six (6) additional 
laptop computers, each of vmich contain identical digital copies of 
the 30,490 emails, but also contain attorney/client privileged 
communications and as such are not being turned over to the. FBI at 
this time. TURNER advised her firm is in negotiations with the 
Department of Justice over the disposition of these laptops. 

Prior to departing, TURNER signed the enclosed FD-341, Consent to 
Search Computers, and FD-597, Receipt for Property. The original ’was 
kept by the FBI and copies were made by TURNER for her records. 

Subsequent to the FBI's collection of the above. Items 1-27 were 
transported to the Washington Field Office of the FBI where they were 
entered into evidence, and given IB numbers. Copies of the intake 
sheets and FD-1004 are enclosed with this communication. Items 1-4 
were then transported by members of the FBI's Forensic Analysis Unit 
to Quantico, Virginia for storage and evaluation. Items 5-27 are 
presently stored in evidence control at the Washington Field Office. 
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FEDERAL BUREAU OF INVESTIGATION 


Date ttf irsmcr iption 


(U//F©tf6) On December 18, 2015 


Executive Secretariat- Information Resourc e Management Mobile Communication s fS/ES - 1R .M 


MC), at the U,S, Department of Slate, email address__ 

was interv iewed by Federal Bureau of Investigation (FBI) Special Agents 


ffisMe,ff ov, telephone 203 


JiXtd 


i ^ ^ Jr V I r- — 1 | 

lifter being advised of the identities of the interviewing agents, and the purpose of the interview, 
provided the following information; 


(U//FOfct© 


ms worked at the Department of State since | ~\ s\d has held a variety of 


IT related positions that include mobile computing, network engineering and developing the State 
_Messaflina and Archive Retrieval Toolset ('SMART* system. 


(U/ /FOUO ) The MC team is responsible for establishing secure mobile voice and data 
communications for the Secretary of State (Secretary) and his team when they are traveling domestically 
and internationally. Prior to a trip by the Secretary and his team, the MC team assembles kits of 
networking equipment at their lab in Springfield, VA, The kits include networking components such as 
switches, routers, encrypters, laptops and VOIP phones and are customized based on threat stream 
information provided by the local Regional Security Officer, The equipment is then tested to ensure that 
it is working properly and that it hasn't been compromised before being sealed in a diplomatic pouch and 
sent to the ITS, diplomatic establishment at their destination. Upon arrivi ng onsite, the team collects the 

pouch and checks that the seals haven't been tampered with,_>rovided that there are nine kits 

of networking equipment and that multiple kits are deployed when the Secretary is traveling to multiple 
locations on a single trip. 


(CflNF) 


bl 


tov^atigaiion _ _ 

Fite# 








002 . Dale dictated N/A 
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{U/ / H i)UOj 'Ihe communication networks established by the MC team provide the Secretary and 
his staff with secure data and voice connections, so that, they can connect back to the Department of State 
network to securely conduct official business. Although the networks established by the MC team create 
encry pted data channe ls, users are still required to use a fob to access their Department of State email 

_noted that the MC team continuously monitors the network enerypters to watch for 


accounts. 


any signs of an intrusion or other compromise of the system. 


(U//F©fcf0)[ 


^provided that the Secretary and his team typically do not use the SBU 


network established by the MC team for persona! matters. He noted that they are free to use the standard 
internet service in their own room* as any other hotel guest would. 


i&ffrffl _ 

When classified documents, or facsimiles^ are sent tor the Secretary to review they arc usually delivered 
to the MC team by the local U,S. diplomatic establishment The MC team then reviews the classification 
markings and page count before providing the document to the recipient. Once the review is complete the 
MC team collects the document* counts the pages and then enters the event into a log. 


(U//T OUO ) If an urgent message arrives at the mobile command post for the Secretary or his team 
the MC team will alert the recipient that a message has arrived and that the recipient should return to the 
command center. Depending on the Secretary's location* t his might me an sending a message to one of his 
Line Assistants or knocking on his door if it is after hours. 


kta ted that the Secretary does not 


have a secure cell phone and that he is typically notified to return to the mobile command center even 
though there are usually secure communications in his car. 


(u//Fewef 


Istated that the MC team's policies and procedures are the same for 


domestic travel as for international travel. However, in the case of domestic travel the communication 
kits are sent via Diplomatic Security instead of via the local LLS, diplomatic establishment. 


SB& 
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(U// F0U O) The MC team is typically staffed by two to four MC team members, depending on the 
site, AH of the MC team members hold a TS/SC1 clearance and receive extensive training on the 
equipment and security procedures before their first deployment. The MC team members are from various 
components within the Department of State and may be contractors. Foreign Service members, or career 
civil servants. The average team member is on the team for t wo or three ye ars befo re moving on t o 

another afigicmment within the Department of State. However,! _ hoted that_ 

_has been on the MC team for approximately years. 

(U/ /FOUO) _was not in a position to comment on how the MC policies and procedures 

had changed between 2009 and today but he noted that they are constantly working to apply faster and 
lighter techn ologies that will achieve their mission of providing secure and reliable communications. 

_pad no concerns with the MC team’s ability to meet its objectives given the resources that it 

had. He Provided that]___[orj_ 

may be able to provide more insight on how the MC team operated between 2009 and 

HI- 


(U//FOOO) A copy of the original interview notes are attached in a 1A envelope. 
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lone hst en- ah &Mv<\ _ 

_ [ After ievievving She 
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k^ore^d his opinion that DoS ^vas nod very 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 6/21 /2016 


(U/ /FOUO) On June 21, 2016 


Date of Birth| I. was interv iewed 


by Federal Rnreau of Investigation (FBI) Special Agents|_, _, 

residence,!_ IVA . After being advised of the identities of the interviewing agents. 


and 


at his 


and the purpose of the interview_provided the following information 


leaving in 


(T _ Iwnrked at the I T S Department of State (DOS) for approximate!)!]years before 

telecommunications specialist under t he Exec utive Secretariat 


(S/ES) at DOS during HILLARY CLINTON’S tenure as the Secretary of State. | p oted that his daily 


duties remained the same during this period despite several reorganizations which moved his position to 
different departments. He was responsible for supporting the installation and operation of secure 
communication equipment at DOS. This in cluded secure video, secure voice, the V/ashfax, as well as 
regular telephone and facsimile equipment] (was not responsible for email s upport, which was the 
responsibility o f S/ES - Info,-“ °- l ^rnnf -^ /-c/cc_n>\/n I IrennrteH tnl I 

who was th 


r 


ation Resource M anagement (S/ES-1RM) 
b/ES-IRM under JOHN 


l 

mm 


reported to| 
EL. 


(U//P0B6) ! [ supported CLINTON’S transition to DOS and was responsible for establishing 
secure communications in her office, vehicles and residences. He initially conducted a survey at each 
residence to identify where the commercially provided telecom service entered the r esidenc e (i.e., the 

' " connected a Tl 


point of presence”) and to assess what equipment needed to be installed. Thereafter, 

£kcuit and ran lines to the locations in the residences .where the equipment would be installed. Although 
[installed the equipment it was sometimes maintained by other departments within DOS. For example 
IRM,maintained the Defense Red Switch telephones (i.e., red phones) once they had be en installed by 
The point of presence in the Whitehaven residence was in the basement an<£ 

4 ji it. ‘ Jn_ C 1 nr r T j-L. —„ A ^ ^1 ^ 1 ^ 1 


ran lines from 


there to closet in the third floor SCIF. He then dropped additional lines to the second floor office area so 
that an additional STE and red phone c ould b e installed. Similarly, the point of presence at the Chappaqua 
residence was also in the basement and | | ran fines to a small luggage closet and then to the final 
equipment locations within the residence. 

(U//FOUO) During the tra nsit!on[ | was also tasked to research the feasibility of obtaining a 

secure BlackBerry for CLINTON ] | was directed'to do this by a combination of the following people: 
DAN SMITH (Executive Secretary), LEWIS LUKENS (Deputy Assista nt Secretary), JO HN BENTEL 
(S/ES-IRM Director), and the Operations Center Director who was either]_ 


on 


Investigation on 6/21/2016 
File# ^ 

By SA 


at 


VA 


302 




Date dictated 


N/A 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency^ it 
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It the time. DOS wanted to assess the feasibility of using secure BlackBerry phones because 


CLINTON and her staff were BlackBerry users so DOS want ed to p rovide them with resources that they 
were familiar with. However, after conducting his assessment ] | found that the secure BlackBerry 
phones would require an entirely new infrastructure, which was cost prohibitive; and the actual devices 
were too thick. 


qj// rOUo i I was shown an email with the subject “State Department Telephone Services at 
Secretary Clinton’s Residence” that he sent to LUKENS and ABEDIN on January 27, 2009. The email 
summarized.the telecom equipment that was installed at the Whitehaven residence. After reviewing the 
email, ;xplained that “CMS VoIP” line referred to the direct phone line to the White House and that 


the “IST/Red Switch” was a red phone that was installed as a backup to the CM S VoIP line. The 


Jstated that not all of the 


“Business Lines” and “Ops Dedicated Drop” were standard phone lines]_ 

instal led equipment belonged to DOS and noted that the CMS VoIP system belonged to the White House. 
^ aid he did this in an effort to give the Secretary the most reliable equipment but this approach 


caused some strife within DOS. 


(U// TOUO )|_| from S/ES-I RM. wa s responsible for installing and 

managing CLINTON’S computer systems at the residences ] C oordinated his installation activities 
with S/ES-IRM and typically did not conduct his work when they were on site in effort to avoid flooding 
the residence with people. 

(U//F QU 0 J Iwas show n an email with the s ubj ect “Secretary Residentia l Installation 

* - 1 - 1 1 J 1 on March 17, 2009. 


ash” that he sent to BENT EL \ 
[explained that a hotwas 



and 


I - 1 I 

onducted to develop a solution for any technical problems they had or 


Hotw; 

complaints that they received ] [ stated that they had significant issues with the unclassified telephone 
lines at the residence in Chappaqua. He attributed this to the number of service providers that a direct line 
traversed as it connected Washington and Chappaqua. As a result the lines consistently had bad 
connections. Additionally, the red p hone on the second floor in Chapp aqua did not function properly and 
eventually CLINTON directly, aske d t o remove the phone | [ stated that he r emoved the phone but 
it created some internal issues for him as the phone was maintained by IRM and not|_|group. 

flj//FQye) | j stated that the “Server: Basement Telephone Closet,” as listed in the attachment 
to the aforementioned “Secretary Residential Installation Hotwash” email, referred to the pointof 
presence for the telephone system in Chappaqua and was not a reference to a computer server] 
aware that there was an email server in the Chappaqua residence. However, he believed it was 
CLINTON’S family email and he did not realize that CLINTON was using the server for DOS business. 

(U// rOUo J [ could not recall when he first learned that CLINTON was using a private email 
account but stated that it was sometime during her tenure. He did not think that CLINTON’S use of a 
private em ail acco unt was odd because COLIN POWELL had a priv ate ema il account that he accessed 
from DOS ] [ iso assumed CLINTON had a DOS issued account ]p id not communicate directly 
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with CLINTON on email and instead worked through HUM A ABED IN when necessary ! lid not 
recall anybody ever expressing concern over CLINTON’S server or email, but noted that he did not attend 
the S/ES-IRM meetings were such topics would likely have be discussed. 
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(U// FOUO) A copy of the original interview notes and referenced documents are attached in a 1A 
envelope. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 5/16/2016 


counsel 


present was 
Department of Justice attorney! 


(U/ /FOUO) On May 12, 2016]_ 

Investigation (FBI) Special Agents_, ,_ , 

F.i spnlinwer F.xeci itive Office Building. 1650 Pen nsylvania Av enue NW, Washington, DC 20 502. Also 


and 


was interviewed by Federal Bureau of 
in room 374 at the 


agents, and the purpose of the interview 


attorney at] 


and 


After being advised of the identities of the interviewing 
[provided the following information: 


(I I// TOI } Q )| _ is currently employed as the 


Security Council 


at the National 


has held a Top Secret/Sensitive Compartmented Information (TS/SCI) 


clearance since 2003 when he was originally sponsored by the Central Intelligence Agen cy (CIA). 


is not,, nor has he ever been, an Original Classification Authority (OCA). In earlyl 


began a fellowship at t he Department of State (DOS) in the South As ia Bureau. After mov ing to the Iran 


desk for a few weeks ini 


began working as) 


Representative for Afghanistan and Pakistan (SRAP). While at the SRAP office 


for the Special 
worked for 


PAUL JONES, FRANK RUGGIERCLMARC GROSSMAN a nd RICHARD HOLBROOKE 


remained working for the SRAP unti 


when he moved to| 


at DOS. 


was unaware of how information flowed to 
was generally aware that the E xecutive Secretariat at 


he Secretary of State 


bould not say who 


(U//FOUO) While he worked at t he DOS 
Secretary of State HILLARY CLIN TON. P 

the DOS was responsible for information f ow to _ 

communicated or emailed with CLINTON. |did not email or communicate with CLINTON 

directly and did not know that CLINTON had a private email address hosted on a private server until he 
was made aware via various media outlets in March 2015. 


(U//FOWO-1 


was assigned official DOS ema il account s on both an unclassified network 


did not have a Joint Worldwide 
could access in his office, but was 


and the Secret Internet Protocol Router Network (SIFRNet) 

Intelligence Communications System (JWICS) email account that he 

aware that he was issued one by the Bureau of Intelligence and Research (INR) at the DQS. [ 
indicat ed he rare ly used his JWICS account because his work did not necessitate it and it was hard to 


access. 


jcnn lH not reca ll any specific DOS training pertaining to official email usage guidelines. 


policies or practices. 


stated “obvipusly classified information goes on classified systems/ 
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(u// Fou ej 


stated Principal’s Committee (PC) meetings were initiated by the National 
notice to government agencies. The PC meetings would involve participating 

b- r i -m t . * 1 n 1 __ A 


Security Advisor via officia. ..- 0 - 0 - r - - 

government agencies presenting their policy on topics prescribed by the National Security Advisor. A 
Deputy’s Committee (DC) meetin g would inv olve the same process although convened by the Deputy 
National Security Advisor. During 


National Security AO visor, during _I tenure at the DO S, he reca lled weekly DC meetings related 

to Afghanistan and Pakistan issues. While in the SRAP office, ! H woutd contribute to packages 
assembled for DC and PC meetings. Usually, the Deputy SRA P would as sign various taskings for a 
policy paper to be used in a DC or PC. Within the SRAP office ] "[ stated there was no science as it 

related to who was assigned work. The assignments could be based on your area of expertise or who you 

. . . _ c g 1 ..... ."L_/-Ifri nn nr 


knew within DOS. ! I was unaware of any formal process when.collaborating, drafting, editing or 


publishing a written product with another bureau or office at the DOS. 

(u/ zroup i 

written product 


|was unaware of the term “upclass” as it refenred to the classification of a 

w __ , did not know how classification of a written product was ultimately decided. 

Recalled seeing written product with suggested classification markings and he would always 


adhere tn those by appropriately marking the same information carried over to his products or edits. 

stated portion markings at the DOS were uncommon before WikiLeaks released classified DOS 


cables on their websitef [understood the classification process to “happen organically” and to be 


“more of an art than a science.” 

(U/ /FOU O) At this point in the intervie w. Agents d isplayed documents and emails concerning a 
October 5, 2009 PC meeting involving the DOS 


provided the following information: 


(U/ /FOU e 


recalled the general topic of th e October 5, 2009 PC meeting, but did not 


recall the exact meeting or any of the displayed documents. 


meetings regarding Pakistan and Afghanistan polic y in 2009! 
any portion of the briefing paper or the attachments. 


stated there were many PC and DC 
Idid not recall drafting or editing 

any poraun or me oncmig pape. ui oiwvu , could not recall who drafted any of the 

briefing paper or the attachments. When sh own metad ata indicating _ drafted the attachments 

associated with the foregoing briefing paper 1 stated the metadata interred he interacted with the 


tuauvmwu uni' * v*. —c? r ± 

attachments, or possibly saved them at one point, but_did not recall doing so. 


(U/ /FOUO ) described the | ~f eport as the result of a review of Afghanistan and 


Pakistan policy ^nes ted hv Ge neral STANLEY MCCHRYSTAL. The repo rt resulte d in a request for a 


recalled there bei ng a classi fied version of the_report released and 


31 


troop surge in the area. i _ _ 

then shortly after, an unclassified version released ( _ _ 

classified and unclassified versions of a document released around the same time 
report as relevant one dav and the n shortly after, irrelevant. During his tenure at the 
not recall ever reading the ] "R eport 


[believed it was stand ard practic e to have both 

escribed the 
could 



(U//-F OUO )| 

while at the DOS, 


1 recalled having no concerns over classification or mishandling of documents 
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(U/ /FOUO) Notes of the interview and the documents displayed foi| 
an FD340 envelope and filed with the captioned investigation. 


kvill be maintained in 
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(U// FOUO) On January 29, 2016 


t late of birt'f 


interviewe d by Federal Bureau of Investigation (FBI) Special Agents 


at Starbucks Cafe, 370 7 


(h 


Ave, New York, NY 10001. Reyre^ejftingl 
Attorney at Law, telephone (202) 


present for the interview, was 
advised of the identities of the interviewing agents and the purpose of (lie Interview £ 
provided the following information: 



b6 

b7C 


iu//Feuef 


joined the Department of State ('DoS'l itT 


JAKE SULLIVAN 


[Thereafter she be came t h^_ 

left the DoS inj |to work for the 


as a Special Assis tant for 
under 


(U/ / F 0UO )! 


provided that as a Special Assistant at DoS she was a political 
appointee. Upon starting at DoS she was sw orn in and then received the standard on-boarding and 


security trainings. However, 


could hot recall any specific training about the Freedom of 


Information Act (FOIA) or the Federal Records Act. 


Inpypir tp iveiled with CLINTON and had no knowledge of her iPad or 
did not have direct contact with CLINTON while she was at ‘ 


I 


(U/ /FOUO) 

'other devices that she used. 

DoS and did not email directly with her until after she had left DoS 
was usin g a personal ema il account but did not know that it was a potential issue until she read about it in 
the press 


> 


new that CLINTON 


was unaware of an official policy at DoS regarding the use of personal email 

.1 1 Y ■% /'P 1 1 ,1 4 -1 T t " 


accounts and recalled that other people on CLINTON’S staff would use their personal emails periodically 


(U/ /TOUO) 
handling of classified information 
Plfl.qqNrt svsfpm but did not know 


held a TS/SCI c learance while at DoS and received training on the 
routinely handled classified information on the 


how such information was transferred from SULLIVAN or 


ko CLINTON- 
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(U// FOUO) ZFS is a Limited Liability Corporation (LLO thfl t was established for the Office of 
Hillary Rodham Clinton, by 


(U//FOUO) When 

brieinallv ioined the! 

_lifrwas 

based in Washington, D.C. at 


J | 

The office then moved to New Yone city n 
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everybody had to work from home until 


he 

hie 

he 

hie 


1U// FOUO ) 



was originally an 


at the 



articles. She was later promoted to thd 


positions of the following individuals who| 
that time period: 


emos and summarizing news 
{provided the names and 

during 


he 

hie 


HUMA ABEDIN - Chief of Staff 
MONICA HANLEY —■ Personal Assistant 



qj/^ewef 


provided that P latte River Networks fPRNt provided IT support to the 


frequently spoke with 


from PRN, 


about routine matters such as purchasing laptops and maintaining the IT systems. 


fuz/p eum l" 


[had no recollection of ever receiving a laptop from PRN or 


spoke with HANLEY regarding this matter approximately one month ago 
and then review ed her email records to see if she had any further information about the laptop. 


found one email between her and HANLEY in whic h they discussed sending the laptop to 
PRN. However, the discussio n transitioned fro m email to phone anc had no further 

recollection on what occurred,! noted that this occurred during the period when everybody 


was working from home due to the aforementioned lease issue. T herefore, i f the laptop was shipped to her 

she would have had it sent to her apartment. She further noted that_was r esponsible for op ening 

the mail for the office but that he would not have opened anything directed to her | 

speculated that perhaps it was shipped to the Clinton Foundation in New York City but she did not know 
what they would have done with it. 


(U// POUO) 


had no recollection of CLINTON'S erq ails being turned over to DoS. 


Nor was she involved in the culling of CLINTON'S emails 
archives of CLINTON'S emails aside from the laptop in question 


snj 


had no knowledge of any 


b6 

b7C 


he 

hlC 


be 

hlC 


he 

hlC 




s w / 




FD-302a (Rev r 3 0-6-95) 


Continuation of FD-302 of Interview of 

, On 1/29/2016 . Page 3 

b6 

b7C 

(U//FQUO) Following the interview, 

bgreed to provide the above referenced email 

b6 

chain with PRN to the FBI. On Febniarv 3. 2016 
email to SA 

counsel electronically provided the 

b7C 


(U/ /FOUO ) A copy of the original 
attached in a 1A envelope. 


interview notes and the email provided byl 


are 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 08/10/2015 


to the Inspector General, United States Department of State, Office 


---j —- - 1 

of Inspector General f STATF. 1G1 2121 Virginia Avenue, NW, Suite 8100, SA-3, Washington, DC 

^ ___I I L—, 1 * . . . _ . i rm c* „ 


900^7 telenhone T2Q2 h 
Agents 


land 


emai 


ii 


Agents and the nature of the interview 


Sstate.gov was interviewed in person by FBI Special 
After being advised of the identity of the interviewing 
provided the following information: 


b6 
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In early March 2015, the New York Times published an article about Secretary Clinton’s personal 
email account while at the Department of State. The article alleged Secretary Clinton used a personal 
email account to conduct official government business in violation of federal laws. Sometime thereafter, 
John KERRY, Secretary of State, sent STATE IG a letter requesting a review of email and records 
management at the Department of State. On or about March 12, 2015, STATE IG and Office of the 
Inspector General of the Intelligence Community (ICIG) received letters from Congress requesting a 
review of State Department employees’ use of personal email for official purposes and coordination with 
relevant agencies to determine whether classified information was transmitted or received by State 
Department employees over personal systems. 


STATE IG initiated a review of the use of personal communications hardware and software by 
five Secretaries of State and their immediate staffs. The review went as far back as former Secretary 
Madeleine ALBRIGHT. In Fall 2014, the Department of State wrote to the last four Secretaries of State 
asking whether they had any official email in their personal records. The Department of State issued 
preservation requests, asking each former Secretary to preserve all electronic data they had while at the 
Department of State. Secretary Colin POWELL responded that he used an America on Line (AOL) 
account. Secretary ALBRIGHT reported that she did not have personal accounts with official records. 
Secretary Condoleezza RICE reported having a Gmail account, which she did not use for official 
purposes. 


In response to the preservation request, Secretary Clinton’s attorney, David KENDALL wrote a 
letter to STATE IG stating Williams & Connolly, LLP was in possession of three thumb drives with 
Secretary Clinton’s email from her private network. KENDALL and Katherine TURNER were the only 
people at the firm with access to the thumb drives. The letter further stated Platte River Networks was in 
possession of the server and had been made aware of the preservation request. 


Investigation on Q8/Q7/2Q15 _at Washington, DC 
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In December 2014, Williams & Connolly, LLP produced twelve boxes, approximately fifty five 
thousand pages of about thirty thousand emails to the Department of State from Secretary Clinton’s 
private server. There is a court order in place, which requires all thirty thousand emails to be released by 
January 30, 2016. The emails have to be released on a monthly basis. The emails are released based on 
select percentages. Thus far, two waves of Secretary Clinton’s emails have been released on the FOIA 
website. Department of State had about fifty to sixty people working on Secretary Clinton’s emails fix the 
FOIA review process. 


Upon receipt of the emails, they were scanned, entered to the OCR process and then uploaded to 
Department’s of State ClassNet system, which was classified up to SECRET. The emails were then 
divided into sub-groups. Then each email went through the FOIA process to determine the appropriate 
FOIA exemptions, if any. Ultimately, the emails were publicly released. Initially, senior State Department 
officials were being used to review the emails. The officials would review the email, identify which State 
Department equity worked on the information, and would then send the email to that department. The 
receiving department would then identify certain exemptions and/or send to other agencies, if other 
agency equities were involved. The emails would come back to Department of State for further review 
and were ultimately reviewed on the FOIA website. The B (1) exemption was used to protect sensitive 
Department of State equities. B (5) exemptions were used to redact internal deliberations. B (6) 
exemptions were used to redact Personally Identifiable Information (PII). 


STATE IG brought in I CIG to assist with the i dentification of classified information and to take a look 


prom ICIG reviewed Department of STATE’S FOIA 


brought broader experience to Department of State’s assembly line review 


at the FOIA re view process 
review process I ._ 

process] quickly determined Department of State needed to make some changes to their review 

process. On or about June 19, 2015 STATE IG and ICIG jointly made four recommendations to the State 
Department related to the FOIA review process. The recommendations were as follows: 


1. Recommend State Department FOIA office request staff support from IC FOIA offices to assist iii 
the identification of intelligence community equities; 

2. Recommend IC FOIA officers review the emails to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

3. Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; and 

4. Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions. 

Patrick KENNEDY, Under Secretary for Management, U.S. Department of State was a key figure in 
all of this. KENNEDY accepted FOIA recommendations number one and three on behalf of the 
Department of State. During a July 2015 meeting with STATE IG and KENNEDY, KENNEDY said 
something to the effect “We sent our folks from Diplomatic Security (DS) to conduct a security 
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assessment of Williams & Connolly”. DS concluded Williams & Connolly had procedures in place to 
secure the three thumb drives. KENNEDY mentioned Williams & Connolly handled the General Petreaus 
investigation, so they had the appropriate clearances and were safe. STATE IG left that meeting with the 
impression that Department of State had an electronic copy of Secretary Clinton’s emails. Later, STATE 
IG was told that Department of State did not have an electronic copy. STATE IG still would like to obtain 
an electronic copy of the thumb drives. 


be 

b7C 


STATE IG’s review focused on the following areas: 

1) Preservation of Records 

a. Are records being preserved far archival purposes? 

b. Are appropriate systems in place for freedom of Information Act (FOIA) purposes? 

c. Are records being kept hi line With the Federal Records Act? 

2) On-Boarding Process 

a. How are methods of communications established for new Secretaries? 

b. Each Secretary may like various devices, how does Department of State make those devices 
secure for usage at Department of State? 

c. How had Department of State addressed security issues? 

d. How did State Department set up secure phone line at Secretary Clinton’s house? 

e. What precautions were in place for personal devices? 

3) Records Creation Designation 

a. How does State Department make sure draft documents get captured in Department of State’s 
records retrieval process? 

4) How has Department of State handled FOIA and the Congressional Process? 

| | opined Department of State’s record keeping process was not good. Prior to the last couple 
of years, record keeping was done on a print and file basis. Literally, if someone wanted something to be 
kept as an official file, that person would have to print the document and request another person file it 
away. STATE IG was in the process of taking a deep dive into the on-boarding process of Secretary 
Clinton’s server. 


Secretary Clinton preferred to u se Black berries. In fact, she had at least two email accounts that 
went directly to her blackberry account. |~ | was not sure whether Secretary Clinton had an 
Information Technology (IT) infrastructure from her time in the U.S. Senate or her presidential campaign. 
Bryan PAGLIANO worked in IT support for Secretary Clinton’s campaign. Shortly after Secretary 
Clinton started her tenure at Department of State, PAGLIANO was hired as a Schedule C, directly 
reporting to Secretary Clinton. PAGLIANO set up Secretary Clinton’s personal server and provided her 
direct IT support. PAGLIANO left the Department of State sometime in 2013 and came back in early 
2015 as a contractor. STATE IG contacted PAGLIANO a s part of STATE IG’s ongoing review. STATE 
IG was informed PAGLIANO was represented by attorneys from Akin Gump Straus Hauer & Feld, LLP. 
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PAGLIANO refused to talk without being granted immunity from prosecution. 
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Secretary Clinton had at least two AT&T blackberry accounts. The first account was the HR15 
email account. In September 2013, there was an article about Sydney BLUMENTHAL having his email 
account hacked. Apparently Secretary Clinton’s HR 15 account was cited in that article. As a result, 
Secretary Clinton changed her email to HRD14. 


| [ believed that Secretary Clinton’s server at some point was held at her Chappaqua 

residence. Departme nt of State would send an advance team to set up Secretary Clinton’s communications 

wherever she neededJ_[did not know who paid for the server. Huma ABEDIN and Cheryl MILLS 

were the conduits for contacting Secretary Clinton. Only a few people at the Department of State were 
able to contact Secretary Clinton directly. 

As part of STATE IG’s ongoing review I 


1 ) 

2 ) 

3) 


b5 per DOS 


|_[recommended tb 

Department of State employees 


Ik to PAGLIANO,_and_who were all 

was willing to provide the FBI with assistance as necessary. 
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ni/ /POTi J») On June .1,Department of State (DoS]| 


was interview ed try Federal Burea u of Investigation"(FBIVSpecial" Agents 


3 


in his office located atl 


Viiginia. After being advis ed of the identities of the interviewing agents, and the purpose of the 


? 


interview. 


provided the following information: 


tq 


JIM 




was the 


from 


POWF.1.1.. and H1I.LARY R. CLINTON at D oS. 


most recently reported to 


(U//F6H©]|_ ; __ 

(IT) Operations for QoS. T his included, but was not li mited to, softwar explications, hardware, 

telecommunications, email. ~ ’ ' " 


DoS Information Resource Management (IRM). 


(U//F©tJ©)l 


provided IT briefings t o CLINTON’S transi tion team upon their 


arrival, however, the DoS executive office did not fall undeij_jresponsibility. JOHN 

RF.NTF.L . who oversaw Executive Secre tariat Information Resource Management (S/ES- IRM), would 
have been in regards to managing IT programs for executive management. 


(U// TOUO) Around the time of CLIN TON’S onboard tr ansition, PATRICK KENNEDY, Under 
Secretary of State for Management, suggested^ I interview BRYAN P AGLIANO, 


Enel 


served on CLINTON’s 2012 Presidential Campaign. ,_, 

PACT IANO. wh o had a MBA from the Universit y of Maryland. Alte r interviewing PAGLIANO, 


who 


interviewed 


^agreed he would be a good fit for 


^__ ^ |team. PAGLIANO was 

subsequently hired on to DoS in a Schedule C position, and was tasked with assisting mainly with cost 
recovery planning and researching DoS technical enhancement opportunities. 

(U/ /FOU 6)_was not aware PAGLIAN O had a secondary role of providing 

technical assistance to CLINTON. Although [ was aware PAGLIANO came from 

CLINTON’S campaign, he noted PAGLIANO did not have any over tly apparent ties to the 7‘ floor [a 

~ m only recalled one 


reference to whe re CLINTON’S ex ecutive suite was located at DoS].I 
incident wherein l vas dealing with a matter that need 


Las dealing with a matter that needed input from the 7 l floor, and 

th«— PAGLIANO 


PAGLIANO mentioned he occasionally had contact with individuals on the 7 l floor. 
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offered to reach out to his 7 th floor contacts, but dismissed the offer and proceeded 

through regular channels. As a Schedule C hire, PAGUANO would have been required to report any 
additional income he received from side work with CLINTON. 


(U/ /TOU &) 


was not aware of, nor did he have anj 


iscussions with PAGLIANO 
^tiid not have 


concerning CLINTON’S use of a private email account or email server.]_ 

direct correspondence with CLINTON, and learned of her use of a private emiil se-verwhen he read 
about it in the New York Times. 


(U//F0W6) It was 


understanding that DoS policy “discourages” the use of 


private email, but does not prohibit it. 


kvas not aware of the specific IT setup in either CLINTO N’S offi ce or 


(U//Feue)| 

her recidprices How ever, he believed both o f CLINTON’S residences had a DoS Secure Fax 


and/or 


was assigne d to the “ 
the 7 th floor. 


help desk ,” ancj 


may h ave had kn owledge of her off ice setup 


also assessed 


I worked fo 


i 


and 


' | but lat< 
[mav also 


but later went to work on 
have more insight 
kvas an IRM 


as to what DoS IT equipment was installed at both of CLINTON’S residences]_ 

technician who would know who installed DoS equipment at the Secretary’s homes. 

(U// FOU O) The State Messaging and Archival Retrieval Toolset (SMART) records management 
system was implemented by IRM as a result of recommendations from a DoS Executive Steering 
Committee. SMART replace d DoS’s telearanh system, and was developed to automate / streamline the 
process for archiving records ] was involved in discussions about the development and 

rollout of SMART, as were representatives from SES. Representatives from the Executive Secretariat 
asked to be the last to rec eive the SMART r ollout. However, ultimately SMART was never rolled out to 
the Executive Secretariat._could not recall exactly when SMART was implemented at 


DoS, however, he assessed SMART was rolled out sometime in 2007 - 2008. 
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b6 
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Date of transcription 5/11/2016 


ssanT 


O n May 10, 201 ej] 

lw£ 


DOB 


was intervi ewed by Feder al Bureau of Investigation ( 
at his residence 


telephone 20! 

'BD Sp ecial Agentsl 


advised of the identities of the interviewing agents, and the purpose of the interview, 
following information: 


MD. After being 


Jprovided the 


(U/ /FOUO )[ 


served as 


ofState (DoS) fr om the beginning of KERR Y'S tenure to 


served as 


Relations Committee, 


lat the Department 


Prior to joining DoS, 


when KERRY was the Chairman of the Senate Foreign 


b 6 
b7C 


b6 

b7C 


(U//FOUO) A lot of information would fl ow throug h] 
information concerning Congressional Oversight 


bn route to KERRY, to include 


Kvas tangentially i nvolved in the process of 


i nvolved in 


to ensure the 


wanted to 


production of DoS records to the Benghazi Committee, in that KERRY ask© 

Committee did not face any DoS roadblocks in response to the request. Furthermore 
make certain DoS was as comprehensive as possible in their response to the Committee’s request 
was primarily concerned with KERRY being questioned by the Committee over the totality of the 
production, and thus wanted to cover every production avenue possible to avoid KERRY being blindsided 
if called to testify to the Committee. The production of documents related lo Benghazi began in the 
spring (April/May) of 2013 and continued as a “rolling production.” 


(U//F0«e^ 


was not aware former Secretary of State HILLARY R. CLINTON was using a 


private email account until 2013, when he recalled hearing news of her em ail accoun t potentially being 
compromised as a result of a hack into Sidney Blumenthal’s email account. advised KERRY to 


use a government email account w hen he became Secretary ofState, despite what previous Secretary’s 


may have chosen to do: 
maintained on a private server. 


Iwas not aware until recently that CLINTON’S private email account was 


b6 

b7C 


b6 

b7C 



CLINTON used a personal email account, as he was aware other Secretary’s ofState had done the same. 


b6 

b7C 
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(U// FOUO ) In August or September of 2014 | ] went to Capitol Hill to mee t with the staff 

members of the Benghazi Committee, in preparation for a pending hearing with KERRY,_recalled 

the topic of issue in his meeting with the committee staff s urrounded inquiries regarding the preservation 

of records. Following his meeting with the committee staff,]_[contacted CHERYL MILLS to advise 

of possib le leaks from the committee referencing their production concerns related t o CLINT ON’S email. 

Ireealled at least o ne phone conversation with MIL LS concerning the matter. _also spoke 

with_from a Public Affairs perspective] also had 

some visibility in the matter, as_ 


(U// F0U 6) In approximately Decem ber of 201 4.| 

CLINTON emails being dropped off at DoS._wa 

and believ ed the production to be close to 50.000 n ages. 

Last Na me Unknown (LNU) and | LNU [ 

_, were bro ught onto DoS to heln nrnces 

Benghazi FOIA production. [described_ 


'201 4,|_recalled a large number of printed 

was surprised at the vo lume of emails produced 

>ages. Two attorneys from__ | 

LNU [believed to be a reference to ind 

i roc ess and coordinate the redactions in regards to 
las someone who would be “encyclopedic” 


concerning the process of production regarding Bengh azi, to include the production of CLINTON’S 

email. DoS_was also involved with the DoS production and 

review process as it pertained to CLINTON’S emails and Benghazi as a whole. PATRICK KENNEDY, 
DoS Under Secretary for Management, also had insight into the production process. 

(U// FOUO ) During the course of the Benghazi production, DoS recognized there was a gap in 
records related to emails pertaining to not only CLINTON, but other former Secretaries of State who did 
not use DoS email accounts. As such, Executive Secretary JOSEPH McMANUS drafted a letter in 
October 2014, requesting former Secretaries produce any personal emails responsive to the Federal 
Records Act in attempt to retroactively address the gap in DoS records. 

(U//TOUO) was not involv ed with the discussions or the process concerning how the 

email production was conducted._did not provide direction on how the emails should be 

produced, nor did he have any knowled ge of wha t methodology was used in determining what emails 
were responsive to production requests. was unaware of any concerns that the original production 

of emails provided by CLINTON was not entirely comprehensive in response to the request, nor was he 
aware of any concerns that the email production might contain classified material. 


(U// TOU Q) A copy of the original interview notes are attached in a 1A envelope. 
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(U//F6fcf6) 


date of birtra 


-b3 per ODNI 
b6 per FBI 
b7C per FBI 


was interviewed at the 


Office of the Inspector General of the Intelligence Community. Patriot Park. 12290 Sunrise Valiev Drive 
Re ston. Virginia 20191 . Also present during the interview were 


and 


the interview. 


1 After being advised of the identity of the interviewing Agents and the nature of 


in I j^NF-)[ 


provided the following information: 

r b3 per ODNI 

““L b6 per FBI 

Jhad worked as an Inspector in the Office of the Inspector General of the b7c per 


Intelligence Community (IC/IG) for approximately 2 years. In May 2015, IG/IC began to assist in the 
Department of State’s Inspector General’s (STATE/IG) review entitled “Use of Personal Communications 
Hardware and Software by Five Secretaries of State and Their Immediate Staffs.” This assistance was 
requested pursuant to the March 12,2015 letter from the United States Senate. 


tU) On or about May 28, 2015 


met witq 


Ithe 


Inspector General, United States Department of State (STATE) and other STATE employees in order to 
assist in completing the review. It appeared that STA TE Freedom of Information Act (FOIA) employees 
were at least already 6 weeks into the review process. | [ immediately recognized problems that 

impeded STATE’S review process. Some of the problems were 1) STATE’S computer software was at 
least 2 generations behind; 2) the optical character recognition (OCR) was faulty; and 3) STATE b3 per ODNI 
employees used initials to describe organizations, as opposed to using intelligence designations. 

bund STATE FOIA employees very helpful. On various occasions many of the FOIA officials 


b6 per FBI 
b7C per FBI 


stayed after midnight to conduct the emaiTreview. 


On or about May 22, 2015, STATE publicly released two hundred ninety-six e-mails 
belonging to former Secretary of State Hilary Clinton (CLINTON). The two hundred ninety-six e-mails 
were previously reviewed and released by STATE FOIA officials in response to previous FOIA requests. 
According to the Defense Intelligence Agency, National Security Agency, and National Geospatial 
Intelligence Agency officials, at least one of those un-redacted e-mails should have been treated as 
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b3 per ODNI 


classified. On or about June 25, 2015 the IC/IG notified the Director of National Intelligence and b6 per FBI 
members of the senate of this leak of classified information. . b7c peE 5,51 


) IC/IG believed that the release of the two hundred ninety-six e-mails did not comply with 
FOIA regulations. In fact, public figures were completely redacted from the TO, FROM and CC lines, in 
violation of FOIA regulations. It also appeared that no STATE FOIA personnel knew how the two 
hundred ninety-six e-mails had been selected to be released. STATE FOIA personnel indicated during the 
FOIA review process, some B1 (Classified National Security Inf ormation) were removed and changed to 


B5 FOIA exemptions (Privileged Communications). 


_pelieved STATE FOIA redactions of b3 per odni 

classified information were inappropriately designated or changed. b6 per fbi 

b7C per FBI 


lUi The two hundred ninety-six emails were taken from approximately fifty-five thousand 

pages of thirty thousand e-mails provided to STATE by the Law Offices of Williams & Connolly LLP, 
(William & Connolly) CLINTON’S personal counsel. According to Williams & Connolly, the firm had 
provided all of CLINTON’S work related or potentially work related e-mails from her @cIintonemail.com 
account. Williams & Connolly also maintained a copy of the .PST file containing the electronic copy of 
the above referenced e-mails, on a thumb drive, stored in a secure safe at Williams & Connolly’s 
Washington, DC office. David Kendall (KENDALL) and Katherine Turner, Esq. (TURNER) were the 
only two people that had access to the thumb drive. The firm further advised they believed the server 
equipment used to host CLINTON’S @clintonemaiI.com account was no longer valid or active. Platte 
River Networks in Colorado maintained custody of the equipment and had received preservation notices. 


W ]&&&) IC/IG had considered serving legal process to Williams & Connolly in order to retrieve 
the thumb drive. Diplomatic Security had attempted to retrieve the thumb drive from William & 
Connolly, but were informed that since the firm had received preservation le tters for the .PST files, the 
firm could not release the thumb drive to Diplomatic Security. According to [_ 


Security was led to believe Williams & Connolly in fact had 3 copies of the thumb drive. 


Diplomatic b3 per ODNI 
b6 per FBI 
b7C per FBI 


!. U) &#&£) I n December 2014> Williams & Connolly informed STATE they had fourteen boxes 
containing the approximately thirty thousand e-mails. However, when STATE officials arrived to pick up 
the boxes, STATE only received twelve boxes. IC/IG had no information as to whether Williams & 

Connolly were authorized to store classified information or if KENDALL and TURNER held security 
clearances. 

b3 per ODNI 
b6 per FBI 


ft I 


were susp icio us of the spec 
and 


surmised 


and other STATE F OIA officials 


appointments to STATE Legislative Affairs of attorneys 


involvement off 


pn3f 


b7C per FB3 


and other STATE FOIA personne l b 


in the FOIA review process was abnormal. 


made recommendations and re quested additional chan ges that were not routine. 


both previously had worked at 


an 



and 


which appeared to create a conflict of interest. 
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b3 per ODNI 
b6 per FBI 
b7C per FBI 


involved in the Lois Lemer, Internal Revenue Service situation. 


and was possibly 


(U//FOUO) On or about June 15, 2015 IC/IG sent a letter to STATE/IG documenting potential issues 
identified in the Preliminary Review of the State Department FOIA Process. The recommendations were: 


b3 per ODNI 
b6 per FBI 
b7C per FBI 


1 . 


Recommend State Department FOIA office request staff support front IC FOIA offices to assist in 
the identification of intelligence community equities; 

Recommend IC FOIA officers review the email to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; 

Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions; t >3 per odni 

b6 per FBI 

1 “ On or about Jun e 26-27. 20 15. a review ot the thirty thousand e-mails revealed five t>7c P er FBI 


additional classified e-mails, 


used key word searches in order to review the e-mail. It appeared 


that one in every five e-mail addresses were not a .GOV e-mail address. In the thirty thousand e-mails 
there were about seventeen unsigned classification upgrade memorandums. These memorandums were 
packages of information which were being held for the Assistant Secretary of State for Administration’s 
signature. 


On or about July 1, 2015, IC/IG officials met with Patrick Kennedy, Under Secretary of State 
for Management and other STATE representatives. IC/IG informed STATE that 1(710 wrml H assist 


STATE/IG conduct the review, whether or not STATE welcomed IC/IG’s input. 




lleged 


b3 

b6 


per ODNI 


STATE made several misrepresentations during this meeting. One such statement made by STATE’S b 7 c 


per FBI 


legal counsel was “there were no classified information contained in the thirty thousand e-mails' 
was willing to assist the FBI further as needed. 


per FBI 


b3 per ODNI 
b6 per FBI 
b7C per FBI 
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United 


StatesJOenartnient of State, Office of Inspector Gene ral 1ST ATE I G). 2 121 Virgin ia Avenue, NW, Suite 


8100-1 


Washington, D.C. 20037, telephone (202)[ 


was interviewed in person by FBI Special Agents 


emai 


£ 


land! 


bstate.gov. date of b irth 


her office. After being a dvised of the identities of the interviewing Agents and the nature of the 
interview, provided the following information: 


in 



began workine for STATE IG in 

asl 


In 

she became 


Evaluations 


and Special Projects unit, which consisted of appro ximately 10 people fr om both STATE IG and the 


Jworked on Congressional requests 


Intelligence Community Inspector General (ICIG)._ 

and other special inquiries that are handled by STATE IG, which included a special project related to the 
Freedom of Information Act (FOIA) process as a whole. 


STATE IG were in the process of conducting a review at STATE, focused on 
three main areas. Those areas were how 1) STATE records are preserved; 2) how STATE employees 
handled the FOIA process; and 3) the on-boarding process for new STATE employees, specific to 
methods of co mmunication, with an emphasis on the Secretaries of State. As part of that review, 
sent a questionnaire in late March 2015 to the former Secretaries of State Madeleine 


ALBRIGHT, Colin POWELL, Condoleezza RICE, and Hillary CLINTON along with current Secretary 
of State John KERRY. The questionnaire specifically asked them about their use of personal email for 
work purposes. 

On April 15, 2015 STATE IG sent out requests to a broad number of STATE-related persons, 
including former staff members and others who may have sent or received work-related emails to or from 
the personal email accounts of the former Secretaries of State. The request asked for personal email s and 

any policy or trai nin g given related to the use of personal email for business purposes._had 

not yet received any email files from any of the staff members of the former Secretaries of State and was 
told that there would be no response to the request by the attorney of Bryan PAGLIANO, former 
information technology advisor for CLINTON. 

CLINTON sent out an all-staff cable that personal email should not be used day-to-day for 
business purposes and that personal email is not secure, so do not use them for business purposes. To the 
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recollection, CLINTON sent that cable out in 2009. After CLINTON’S time as 
Secretary of State, there was also STATE guidance that if STATE employees had to use their personal 
email for business purposes they should send a carbon copy (Cc) to their “.gov” work email as well. 


b6 

b7C 


b6 

b7C 


In August 2014, STATE Under Secretary for Management Patrick KENNEDY sent out a 
memorandum for STATE employees not to use personal email for business purposes, but it did not 
address whether personal servers may be used for business purposes. There was STATE guidance that all 
information/emails related to work should be on an “approved automated system,” but there was no b6 

known STATE guid ance regarding t he use of personal servers to conduct business. That will be an b7c 


official “finding” by 
STATE IG. 


colleague^ 


]stated[] 


interviewed PAGLIANO’s former boss while at STATE, and 


PAGLIANO’s former boss was unaware PAGLIANO set-up CLINTON’S personal work server for her. 
There were no on-boarding policies in place to prevent what happened related to CLINTON using a 
personal server. STATE IG was unsure what, if any, site survey or systems security and maintenance 
checks were conducted prior to the installation of CLINTON’S server by PAGLIANO. STATE IG was 
also unsure if anyone else other than STATE employees knew of, ever saw, or had access to the server. 


b6 

b7C 


All of STATE’S top officials’ email records related to their “.gov” emails were being preserved, or 
“journaled,” no matter what. Most STATE employees, those not considered top officials, could create 
email records themselves using the SMART system. The onus was on the regular STATE employees to 
self-determine what a record is and if they didn’t use the SMART system and they’ve double-deleted the 
email, it was more than likely not going to be preserved. 


Regarding STATE IG’s review and interaction with KENNEDY. 


had met 


KENNEDY several times, and stated KENNEDY was never overly uncooperative and never did anything 
unusual with regards to his cooperation . However. KE NNEDY’S tone and tenor were definitely not 


positive when dealing with STATE IG. 


Iso attended meetings with KENNEDY in the past 


that discussed general goals going forward for STATE with regards to STATE IG’s review. 


b6 

b7C 


_| review led her to interview STATE officials who worked the FOIA process from 

within the Bureau of Administration, Office of Information Programs and Services, which fell under 
KENNEDY’S purview. Some FOIA officials have seen events and behaviors they did not like or that 
made them uncomfortable, to include KENNEDY’S attitude toward them and how they handled the FOIA 
process related to CLINTON. Additionally, there was a request from the FOIA officials to STATE 
employees that asked for any emails sent to or from personal email accounts related to the CLINTON 
FOIA request. Some STATE employees responded they had no emails that fit the request; despite the 
negative response, for some STATE employees, FOIA officials knew there were at least some emails that 
should have been included in their response because the FOIA officials had already reviewed those emails 
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from within the batch of 30,000 CLINTON-related emails. Despite knowing some STATE employees 
had not responded correctly, the FOIA officials had no recourse to compel a positive response. 

For the FOIA request related to the 30,000 CLINTON-related emails and the Congressional 
inquiry that req uested Benghaz i-related emails, those review process were handled outside the normal 
chain of pennle.l Idid not know whv these requests were ha ndled outside the normal chain of 

people, but 


b6 

b7C 


b6 

b7C 


b5 per DOS 


recommended the FBI talk to 


for more information on events discussed 
above and for names of other people the FBI would be interested in talking with regarding the same. 


b6 

b7C 
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(U/ /F0UQ ) On May 25, 2016j_| Special Agent, United States Secret Servi ce 

fUSSS). was in terviewed bv Fede ral Bureau of Investigation (FBI) Special Agents (SA) 

_and SA_ Also presen t for the interview was a Federal Law Enforcement 

Association (FLEOA) Attorney and USSS SA| I A fter being advised of the identity of the 

interviewing agents and the nature of the interview. provided the following information: 

_ ru/^e yei Iwas assig ned to the prote ctive detail of WILLIAM CLINTON from 

_to_Because of l [ information technology (IT) s talls, he was as ked 

to do network assessmen ts and troubleshoot IT issues at the Clinton Foundation. From_to 

_| assisted the Clinton Foundation in a case related to theft of information on the 

Clinton Foundation information systems. 

(U//FQUO) | vas contacted by JUSTIN COOPER in Janua ry 2011 to as sist with the 

security of an email server at the Clinton residence in Chappaqua, Ne w York.l did not 

physically or remotely access the server in the residence at Chappaqu*_Iwas not aware of the 

hardware components of the server or software installed on the server. conducted open source 

research relating to the security of email s ervers and co ntacted BRYAN PAGLIANO to recommend 
adding outbound IP filteri ng to the server . received PAGLIANO’s name and contact 

information from COOPER. |was aware of no other information pertaining to the email server 

located in Chappaqua. 

(U/ /FOUO ) Notes of the interview will be maintained in a FD340 envelope and filed with the 
captioned investigation. 
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On September 17, 2015J 


Department of State tDoSV 2025 I} . Street NW, Washington, D.C. 20520, was interviewed by 


Special A een{ 


4uj 


Also 


present was 




United States 

B1_ 


d Information Technology Specialist / Foren sic Examine] 


l 


DoS, office telephone 


After being advised of the identity of the interviewers and the nature of the interview 


provided the following information: 


The DoS email system uses a hub and spoke configuration. There are approximately 120,000 
mailboxes on the system, of which approximately 95,000 are for unique users. The other 25,000 
mailboxes are general mailboxes and aren’t assigned to a specific user. Approximately 35,000 mailboxes 
reside on the local hub and are administered by Information Resource Management (IRM). The 
remainder of the mailboxes reside on spokes within the system and are not controlled by IRM. Spoke 
mailboxes, such as those at overseas posts, are administered by the local Information Security Officer and 
backup procedures vary by site. 


Upon receiving the preservation request from the FBI, IRM preserved and thereafter exported the 
mailboxes for all of the individuals listed on the request whose mailboxes are on the IRM system. 

estimated that approximately 400 of the 900 accounts listed on the preservation request are 
active users on the IRM system, with the other accounts residing on spokes, POEMS, or are associated 
with users who are no longer at DoS. Each exported mailbox includes all of the active mail folders as 
well as any items in the Recoverable Items storage area of Microsoft Exchange, which retains items for 90 
days after they are deleted by the user. The export does not include any files, or mailboxes, that may have 
been archived by the user to their local desktop. 

The IRM operating system is backed up and retained for approximately 30 days. However, the 
email database is not part of the backup. For email recovery, IRM uses Database Availability Groups 
(DAG) whereby five dynamic copies of each mailbox are maintained, at two sites, to allow the system to 
be quickly restored if the primary database fails. 


opined that the exported mailboxes were unlikely to contain many emails from prior to 
2012. Prior to that time mailboxes were limited to 500MB of data and users were regularly required to 
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delete old emails, or to create Personal Storage Folders (.pst files), when they hit the storage limit. 
Between 2012 and 2013, the storage limits were increased to 5GB. 

IRM uses the State Messaging and Archival Retrieval Tool (SMART) to archive record emails. 
The system was impleme nted in phase s between 2008 and 2010 and replaced CableXpress for archiving 

cables and record emails.|_noted that communications sent to an embassy are referred to as a 

cable and emails sent to a person are record emails. SMART requires the users to identify an email as 
meeting the record standard and then selecting the appropriate SMART tags within Outlook while 
composing the email. The period of retention for a SMART record is dependent on the tags selected by 
the user. 


use the 
nolicv.l 




p rovided that S/ES-IRM, also commonly referred to as the POEMS system, does not 
. syst em to archive email records. They are instead obligated to follow the 'print and file' 
_[further noted that records for senior officials are archived when they leave office. 


recommended contacting Deputy Assistant Secretary MARGERET (PEGGY) GRAFELD, 
Deputy Assistant Secretary for Global Information Services (A/GIS) for more information on this 
process. 

The Bureau of Intellig ence and Rese arch (INR) i s responsible for a dministering file mailbox es on 


the top secret network at DoS. 
be able to provide further details on INR and the top secret mail system. 


provided that! 


telephone 202 


would 
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On September 21,2015, 

Department of State (STATE), Office of Inspector General (OIG), Off! 


United States 



, ■ -- 1 -igation s. 1700 

N. Mo ore Street, S uite 800. A rlington. VA 22209, office telephone 70 j) _ fax 703 | 

_^ email addresq_instate, g ov called the write r. Information Technology 

Specialist/Forensic Examiner (ITS/FE)_of the Washington Field Office (WFO) 

Computer Analysis Response Team (CART). 


|to provi de general inf ormation regarding group of fifty (50) 
_ during his review of the Microsoft 


The writer asked 

email messages of interest that were found byj 

Outlook Personal Sto rage Folders Lpst files, or “mailboxes”) for HUMA M. ABEDIN and 


confirmed that the Federal Bureau of Investigation (FBI) 


CHERYL D. MILLS]_ 

Previously received a full copy of the two (2) mailboxes on a Lexar thumb drive provided by 
Jfrom STATE. 


“J? 


stated that he performed a search across the email data for the words “Secret” 
OFORN” using a search Program called “Perceptive Search” and that the search returned 

fifty documents of interest._[believed that most of the search hits appeared within the 

metadata of Microsoft Word documents, which he identified as “Call Sheets,” or doc uments 
provided to the Secretary of State prior to attending briefings with foreign dignitaries.[_ 


believed the search hits appeared within the metadata of the documents and not within the actual 
content of th e documents. The identified documents were sent as attachments to emails. 
_could not remember if there were also search hits within any email messages. 


believed that the documents may have been generated from a classified system 


and that at some point they may have been moved to an unclassified system. However, he was 
unsure whether the “Secret” and “NOFORN” marki ngs would ha ve been generated automatically 
by the system that was used to create the documents. |stated that STATE had not yet 

determined how the documents would have been marked with regard to classification. 


The writer requested thal |provide the FBI with the fil e names and Message- 

Digest algorithm 5 (MD5) hash values tor the files identified by STATE. advised that 


STATE was in the process of moving the email data onto a stand-alone computer within a 
Sensitive Compartmented Information Facility (SCIF) and that he anticipated this would happen 
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toward the end of the week ton or around September 7S 9fiistl 
coordinate with 
nai 


, On 09/21/2015 Pa ge 


I 


|stated that he would 
OIG, STATE, telephone 703- 


values ot 


=j 1 I- l_ _|utu, atit, telephone /Uj 

I email address]_^state.gov to obtain and provide the FBI with the MD5 hash 

the identified files and that he would contact the writer when this process was complete, 
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(U// FOU O) On June 23 2016 


], date of birth[ 


telenhonicallv intervi ewed by Federal Bureau of 
Also present for the call wasl 


nvestigation (FBI ) Spec ial Agent; | _ | 

bounsel | Attorney 


was 


and 

at 


1 ,aw After bein g advised of the identities of the interviewing agents and the purpose of the interview, 
provided the following information: 


. (U//FO 
was shipped hx 
April of 2014[ 


1 


of 


had no new information regarding the whereabouts of the laptop that 
from Platte River Networks (PRN) to the Clinton Foundation in 


was not sure who the mailroom manager for th e Clinton Found ation was at 

confirmed 

Floor, New York, NY 


that time but offered to contact the foundation to inquire about the shipment.]_ 

that the address of the Clinton Foundation was 1271 Avenue of the Americas, 42‘ 

10020. 
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during the call and agreed to check her personal records for any relevant information. 


(U// rOUO ) A copy of the original interview notes and the referenced email are attached in a 1A 
envelope. 


at 


Investigation on 6/23/2016 _ 

[302 


Washington. DC 


File U 


By SAl 


Date dictated 


N/A 


b3 

b7E 


b6 

b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. . 



4 - 


FD-302a (Rev. 10-6-95) 

ALL FBI INFORliATIQI l T CONTAINED 
HEREIN IS UNCLASSIFIED 

CATE 10" 12“ 2015 BY J37J85T94 ITS ICG FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/27/2015 


On October 27, 2015, | a Special Agent with 

Homeland Security Investigations (HSI ), Depar tment of Homeland 
Security (DHS), Norfolk Virginia, (757) was interviewed at 


the Norfolk Federal Building. After being advised of the iden tity of 
the interviewing Agent and the nature of the interview, 
provided the following information: 


was previously employed as an Agent at the Department of 
State, Bureau of Diplomatic Security (DS) , and assigned to f ormer 
Secretary of State Rice's personal protection detail from until 


January 2009. In Januar y 2009 h e was reassigned to former Secret ary of 


State Clinton's detail. 


| [tfhen he left the Department of State. 


served on Clinton's detail until 


be 

b7C 


b6 
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Clinton's tenure at State brought about significant changes to 
established security and diplomatic protocols owing to the di ssimilar 
management styles and attitudes between Rice and Clinton. 


claimed that his time on Clinton's detail was short and that he had no 
information to offer with regard to security violations or mish andling 
of classified information on the part of Clinton or her staff. 


advised his recollections were vague regarding his time on Clinton's 
detail^ and that he could not recall specific events with clarity. 

was aware that a Blackberry phone was kept in a desk drawer in 


Clinton's SCIF but could not say with any degree of certainty that the 
phone belonged to Clinton or that storing it in the SCTF was a 


security violation. 


provided the name.of 


a former ASAC on Clinton's security deta jl as F| nmenne who may be in a 
position to provide addit ional insight, 
the current whereabouts of 


was not familiar with 
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Date of transcription 11/06/2015 


On November 6, 2015, 


(STATE), of fice telephone 70 1 

Estate.gov call ed the writer, 


(1TS/FE) 


cell 202 


Senior Special Agent, 


Office of Investigations, OfficeoftheJnspector G eneral (PIG) . United States Department of State 

//'inn a w 4 4 __ J I ____ I r 

< 


email address 


(FBI) Computer Analysis Response Team (CART) 


nformation Technology Specialist/Forensic Examiner 
f the Washington Field Office (WFO) Federal Bureau of Investigation 


stated that he located an email containing content from a “confidential cable” 
sent from a Microsoft “Hotmail” email account to the STATE email address for Huma Abedin 
(AbedinH@state.gov) that could be found in the data contained within evidence item 1B26 
provided by STATE to the FBI on or around August 14, 2015. Evidence item IB26 is further 
described as a white and grey Lexar USB 3.0 thum b drive labeled with a sticker containing the 
words Dept of State 703-312-3856." stated that when the email was received in 2011, 

the information was classified and that it was supposed to be declassified in 2013 but that he did 
not know if that was the case and did not know the current classification of the document. 


On November 6, 2015,_|sent the writer an email containing information to assist 


in locating the identified email in the FBI data set in evidence item 1B26. A copy of the email is 
included in a 1A envelope. 
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